When the server is started, the firmware checks the signature of each boot component including firmware drivers and the OS. If the signatures are valid, the server boots and the firmware gives control to the OS. As mentioned above, if you choose to skip KB5015879, you can wait for next month’s ‘Patch Tuesday’ updates that will be released