What is the “KEK Update for Secure Boot” in Windows Update?

Windows Secure Boot KEK update explained: what it is, why it’s needed, and how it keeps your PC safe during startup.