Is this an older system?
I know there were some Secure Boot vulnerabilities a couple of years ago that Microsoft were having some issues pushing out updates for, but I don't know if that would cause it so show as it being disabled within Windows.
support.microsoft.com