The thing is it was pretty obvious from the update description that something like this will happen. But the update in question is cumulative so even among advanced users that know how to restrict autoupdates many were forced to install it to prevent even more scary exploits for which there are no separate patches.
And now people need to disable Secure Boot entirely to avoid the side effects. Way to improve worldwide security, MSFT.