Patch Management Feature Policies do not have an option in the Approval Policy section under Microsoft to allow Security Only Cumulative patches to be installed instead of full feature patches. There should be a toggle (checkbox) that will allow you to enable Security Only to Approve those and Ignore full featured, and unchecked should allow the full feature patches to be Approved and Ignore the Security Only patches. Installing both is redundant and could cause failures for one or the other.
Idea No. 4194