We see the Secure Boot report in Intune for all of our devices even though they are not all enrolled in Autopatch. Is this expected and would this be accurate? 

Also, the report shows a certificate status as one value, but when you export the report to a CSV, all the values are different (all changed to 'Not applicable'. Has anyone else reported this?