Just an update...learning something thanks...installed fwupd and it said something about disabled service.

Ran fwupdmgr (thanks Google) and it lists a whole bunch of hardware on my laptop as "device with no update found", included in that are UEFI device firmware, UEFI dbx, System firmware etc.

I will check further, thanks again. Didn't know about this.