I know this may seem extreme, but you could always run Adobe in a separate MacOS user login to keep it sandboxed. When you don’t need Adobe, just log that user out…
If some processes are running as root, there's no guarantee that they won't fork+daemonize and still be running when you login with your regular user. On Windows, it's become a habit for some apps to install their own "Update Service" as part of the regular app installation.
