> Chrome updates automatically. So how does he/she avoid auto update?

Kill the auto-update daemon, remove it, prevent it from re-installing itself (by creating an empty "GoogleSoftwareUpdate" directory with write bits unset in place of the removed one). Done.