There was one laptop at work (identical to another 14) that wouldn’t grab the update, although I approved it through WSUS and WSUS reported it was needed by that system. I downloaded it manually and attempted an install but it failed at some point and rolled back. I then disabled Symantec’s EndPoint Protection and retried and it went ahead without a hitch. Not sure why it wasn’t being offered to that laptop over any other (since they were all new) but it might have been the timing.
So, I’d recommend giving the download a try if you are eager for it. If it fails, that might give you more clues as to what’s holding it back.