Getting closer!
I'm wondering if part of my confusion because something in the vLCM is wrong. The critical host patches baseline says it was last modified (which I assume means downloaded in this case since I didn't build it) 10 months ago. But when I select it and view the contents it includes the ESXI update that was released a couple weeks ago.
