Noitifications about security updates keeps coming after the update is done
I think this is the default behavior of the Update Status module, which is part of core. Unless you turn it off or reconfigure it, the modules will be checked daily and the site administrator will get email notices.