Hello again,
As previously mentioned I took the plunge and turned on Windows Update again yesterday and it installed KB5126256 and once again PC froze after exactly 5 mins. I managed to uninstall and all was fine again.
I did read elsewhere about a task called Secure Boot Update causing this problem. It's in Task Scheduler here: Microsoft\Windows\PI\Secure-Boot-Update. I disabled this, re-installed the update and everything went smoothly - no freezes/crashes. Rebooted PC just to be sure and all is still good as I type this.
So, it looks like this is the culprit and suspect my BIOS is too old to update, which has been suggested the ultimate problem. PC is over 10 years old, so will have to live with this for now.
Just to add though, I force installed Windows 11 on the same PC as a dual boot and that also crashed after 5 mins with the latest update - again disabling Secure Boot it was fine. So this is not just a Win 10 thing. That does point to my PC and the very old BIOS which I'm pretty sure I can't update.
Anyway, that's the latest, so at least there is a temp workaround and good to know what is actually causing it.