There are no secret patches being pushed to hubs.
Any and all updates are controlled by the user, and are released via firmware downloads that the user must interact with in order to initiate.
The hubs do call home so to speak, once every 24 hours to update cloud info, this is the data that's shown in the portal page.
We also push a message to the hub when new firmware is available, but again, it's not downloaded or installed until initiated by the user.
Sunrise/Sunset events are calculated within the hub based on lat/long settings on the location page, these are not cloud dependent.
If you have no internet, it's likely that your time will drift as there won't be any NTP for the hub to get time updates from, but this is true for any lan device that attempts to keep accurate time.