All updates containing "Rollup" might contain telemetry stuff. WSUS Offline doesn't do blacklisting of those updates, you have to do it yourself by adding the updates to wsusoffline\exclude\custom\%win%-%arch%.txt (which is win61-x64.txt for Win7 x64). If you want to prevent the telemetry stuff, you should not install KB3207752 which is this month's Rollup, NOT the Security-Only update!
And Microsoft has of course released a Security-Only update as they did in the last couple of months. For an overview, you can take a look at the Win7 update history page