Thank you for the session. Most of my questions have been answered.

We have Intune managed endpoints, Azure Virtual Desktops and Azure Virtual Machines to managed with a combination of Intune and GPO.  A mixture of these machines have secure boot turned off. Will those machines become inherently vulnerable, and not updated if they were to have secure boot turned on at a later stage?