You can use WUMT with "Include Superseded" checked, it will show all IE updates and can be hidden together
There is even a higher revision of 2023-01 CU for Windows 7 which was released but made expired soon after, in which case the official update remains the one released on 11/01/2023. I don't see the same for Windows 2008 R2 which largely confirms what you said.
All 2022-09/12 rollups are restored (each one replace 2022-08 rollup to fix the supersedence chain, but not each other) "2023-02" name for 2022-09 is just another mistake (update itself is not change) their obsession with ending Win7 support leaded to this mess
Metadata relation is restored for all rollups, as previously was before last Monday (except "2023-02" wrong name for 2022-09) all this trouble just to remove ESU LPP KB5016892 from Win7 metadata? it's only recognizable by WSUS anyway
All back to normal now. All of the KBs I had to hide because of the CU expiration disappeared from WU's 'Restore Hidden Updates' after running another search for updates today.
Please excuse me if this has been explained before, but what exactly does KB5016892 do? Does harden the ESU MAK license key system against bypasses and exploits? Does it add skus for additional ESU years? Is it even relevant to us?
.NET 3.5.1 is inbox unless you disable it from Program and Features, you should install its update KB5022523
I was forced to manually install KB5023769 SMQR because Windows 7 Pro 64-bit (recently installed and already up-to-date to February 2023) did not detect it when I did a "check for updates". BypassESU-v12_u was removed first, then a reboot was done, then Win7_WU_ESU_Patcher was deployed for Embedded, then another reboot was done. Windows Update still did not detect it.