We tried to get more information from Microsoft Support to better understand the root cause.Apparently what is part of the issue is the way how the Configuration Manager infrastructure was implemented.In this particular case the site server and SQL are installed on one system and the SMS Provider is installed on another remote system.
This recommendation is because the update installation might include actions like reinstalling site components and site system roles.
We recommend that you install the update immediately.
This class grants access to view and manage updates in the Configuration Manager console.
By default, the Update packages class (SMS_CM_Updatepackages) is part of the following built-in security roles with the listed permissions: Note When you start a prerequisite check and then view the status, the Installation phase appears to be active, however the update is not actually installing.
Note Starting in version 1802, the console version is now slightly different from the site version.