Windows Update can update drivers, sure, but BIOS/UEFI updates are another beast entirely. They patch critical security gaps and need to be checked manually.
Secure Boot protects your PC against bootkit malware. The Windows update refreshes expiring Secure Boot certificates. To install, head to Settings and select Windows Update. I typically advise Windows ...