Docker downloads all updates into a directory in /Users/$USER/Library/Caches/com.docker.docker/org.sparkle-project.Sparkle
Let's make this directory inaccessible to the user under which Docker is going to run (you).
Switch to root user:
sudo su
Change directory ownership and prevent access to other users: