Microsoft is taking its time with the boot certificate rollout, but you don't have to. Activate the latest UEFI CA 2023 right now.
Microsoft's February Patch fixes 6 zero-days - but some Windows users shouldn't update yet ...