Solved Death by Update: Windows Security Tray Icon Loses Some Functionality

Win 11 Pro 22H2. Build: 22621.1992 / HP OMEN 17t-ck100 Laptop.

A Definition Update, likely KB5007651 (Version 1.0.2306.10002), kills the hover description and right-click menu capabilties for Windows Security's tray icon.
The program still opens and operates from systray with left mouse click (or start menu). No other tray icon is affected.

Things I tried:

• Resetting icon cache. NO effect.
• Ran DISM.exe /Online /Cleanup-image /Restorehealth
• Ran sfc /scannow. NO integrity violations.
• Tried an inside-of-Windows re-install. NO change.
• Did fresh, offline install from USB boot drive. No updates, drivers, etc.

Finally, Windows Security was COMPLETELY functional again with tray icon working as designed (including popup description and right click menu).

The plan was to try to set group policy 2-Notify for Download for Configure Automatic Updates and monitor each install.
That allowed me to manually install one update, but upon reboot the OS went back to firehose forcefeeding seven updates all in one serving.
As I watched this critical crash my crap cramfest, it seemed once KB5007651 installed, the hover and right click capabilities for Windows Security's tray icon died yet again.

Sure, it is an aesthetic thing, but I would like to find a workaround.

16/07/2023. The same problem here. Same Windows version with the same update. The right-click menu of Windows Security's tray icon damaged. São Paulo - Brazil.

The resolution that worked for me:
1.) A fresh, offline install of Windows 11.

2.) Use Local Group Policy Editor to have Windows Update notify of new updates, not forcefeed.
(Computer Configuration>Administrative Templates>Windows Components>Windows Update
Manage end user experience>Configure Automatic Updates.
Choose Enabled. Configure automatic updating. Change to 2 - Notify for download and auto install. Apply.)

3.) Use Local Group Policy Editor to block Windows Update from installing device drivers.
(Computer Configuration>Administrative Templates>Windows Components>Windows Update
Manage updates offered from Windows Update>Do not include drivers with Windows Update.
Choose Enabled. Apply.)

4.) Connect to internet.

5.) Get wushowhide.diagcab troubleshooter from Microsoft:
Despite any warnings you might get, the app is safe. In time, Microsoft will be replacing it with something else.
For now, it works.

6.) Use the above tool to hide the following:
Update for Windows Security platform antimalware platform - KB5007651 (Version 1.0.2306.10002)

7.) Install other Quality and Definition updates that Windows Update offers.

8.) Install device drivers from your OEM source (HP, Dell, etc.) or whoever made the parts that are in your rig.
An exception to this would be to use NVCleanstall for NVIDIA driver installation. Read about that elsewhere.

I am omitting tons of other stuff I do like removing bloat with Powershell (or Revo), blocking telemetry,
tweaking this and that, BUT... for me, this method provided a clean, working OS, and retaining full
Windows Security tray icon functionality (i.e. hover pop-up description, and right click menu).
That is, until Microsoft crams on the next antimalware platform update that breaks it.