unfortunately we don’t have an easy way to filter Core security updates mails, without blocking also relevant update emails for local modules
so on each security core release there is always some noise arriving to owners mailboxes
if you don’t have local modules, and just rely on Central supported modules, you can disable all the notifications by going to /admin/reports/updates/settings under your website and delete any address under the section Email addresses to notify when updates are available