Updates only with revpatch=sbvmm

Why do we have to boot with RestrictEvents.kext and revpatch=sbvmm to see macOS updates lately?

What has changed?