We have added driver updates from HP into SCCM, but have not deployed them. When viewing patch compliance or needed updates for a computer, the number of updates reflects updates that we have not deployed, but are simply in our system. This skews the numbers, and makes the compliance data look worse than it is.
The same problem happens if you simply enable a new software product, not any computer that needs those updates shows that even if not deployed.
In my opinion, the compliance info should either only look at deployed updates, or have a toggle that lets the user decide.
The Software Updates dashboard generally only takes into consideration Deployed updates, however will will look to add this as an option (perhaps default) to the per device compliance data.