WP updates, documents vs reality

On the news section about WordPress 5.0.1 Security Release it says “Updated versions of WordPress 4.9 and older releases are also available, for users who have not yet updated to 5.0.”

My first question is, for those of us who wish to remain on 4.9.8, how can we manually confirm that security update for 4.9.8 becomes installed? How is it labeled? 4.9.8.1 or how?

My other question revolves around WP updates. The documentation about this is a bit vague. My host has one-click-install available for WP, and it allows me to select which parts of WP becomes automatically updated. Currently I allow updates for minor- and security updates, but disallow theme- or plugin updates. I can confirm that minor updates have worked automatically with this setup. Still, the default setting in my wp-config is:

define('AUTOMATIC_UPDATER_DISABLED', true);

According to WP’s documentation the automatic updates that I’m receiving should not even be possible with setting???

My last question is this:

If I manually update the wp-config file, is the following setting fully functional?

define('AUTOMATIC_UPDATER_DISABLED', true);
define( 'WP_AUTO_UPDATE_CORE', minor );

Can these both appear in wp-config, can they appear in this order, and does the outcome allow minor- and security updates but no any other updates, e.g. plugin updates?