Your template VMs do not need to be assigned a NetVM to be able to
update them or install software in them. The package managers in your
TemplateVMs are configured to update using a proxy system. Please see
here in the documentation,
https://www.qubes-os.org/doc/software-update-domu/, scroll down to
"Updates proxy".
The proxy get configured in '/etc/qubes-rpc/policy/qubes.UpdatesProxy'.