All updates that change the boot manager will no longer get applies. Usually these are secure boot related security updates, but maybe also bugfixes for exotic boot scenarios.

Normal kernel-level and user-level security vulnerabilities will be continued to be fixed.