How do I just block/prevent the Secure Boot update, without going into the BIOS?

1. Use the Group Policy Editor:
Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage updates provided from Windows Update.
Enable “Do not include driver updates with specific update types” and select “Safely initiate updates”.
2. Using Registry Editor: Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate.
Create ExcludeWUDriversInQualityUpdate and set the value to 1.
Pause updates: Pause updates in Settings > Windows Update.
3. Use a third-party tool, such as Windows Update Blocker, to block updates.
4. Contact Microsoft Support: Submit an issue and attach a screenshot.