I believe that change is to enable Secure Boot by default. Changes like this and enabling the CPU-integrated TPM by default have happened all across product lin

I believe that change is to enable Secure Boot by default. Changes like this and enabling the CPU-integrated TPM by default have happened all across product lines in the past year or so due to Windows 11 requirements. I applied an update with that changelog line recently and it definitely now turns Secure Boot on (presumably in this "non-enforcing" state mentioned in the article) by default when it previously didn't.