Doing a quite test with CF. I don’t have any issue with windows updates. I do have a Allow in Svchost rule which was created when prompted with pop-up as Proactive configuration is “Alert Incoming” for stealth ports by default.
There is the Sectigo Untrusted Certificate when I did a rating scan which I think has been an issue previously but I’ve just ignored it for now.
Anyway, not having the Update issue that others are having. Setup is @cruelsister configuration as I like a set and forget. Will see if there’s any issues in the coming days.