The bundle for Discover Applicable Updates in ZPM is associated with all relevant OS machines in the managed container (working as intended).

What I want to know is, why on earth is it also associating itself with INVENTORY ONLY machines????

There's no way it will ever get delivered to the machines, so why is ZPM associating itself with them?