I have un-checked all three Automatic Downloads checkboxes in Store prefs, and the store is disabled in Parental prefs. It looks like those checkboxes are magically re-checking themselves the first time a device syncs.
Either "never download anything" or "remember the fucking password and stop asking me" would be acceptable solutions.