The patch history of devices shows some updates which are applied but not all. Support told me that getting updates over WUA API only shows updates which are still on the update servers.

Problem now is that you cannot be sure which updates are applied to the servers because the updates suddenly disappear from the history. So you have no overview which patches are applied.