Dnf-automatic vs dnf --security update

So this is about automatically putting on security patches but not using cockpit.

When I use dnf-automatic, its says no security patches are needed:

Last metadata expiration check: 3:44:48 ago on Fri 05 Nov 2021 09:54:45 GMT.
No security updates needed, but 67 updates available

But when I use dnf --security check-update there are a whole stack of security patches lined up.

dnf --security check-update
Last metadata expiration check: 3:45:39 ago on Fri 05 Nov 2021 09:54:45 GMT.

NetworkManager.x86_64 1:1.30.0-13.el8_4 baseos

This has only just started working on Rocky this week but I have no idea why. I wonder if it rings any bells here.
Kind Regards