After installing a Full Security Rollup (for example "CA - Office 32 Bit - FULL Security Rollup v2109.00") it was seen that there were several missing patches compared to what Windows Update (WSUS) installs on the same server.
For example, patch KB4484467 is not installed by the RollUp but is installed by WSUS
Client Automation - All supported versions
All Full Security RollUps install only 'Security' patches, so all 'Functional' patches are not included here. Based on the above example, KB4484467 is a functional patch.
Recently, functional patches started to be added as individual patches to Patch Management:
Old functional patches are not going to be included.