Agree with the reply above from Andy, mailflow rules will not be override after updating CU.
And if you have customised the files list above, it's better to backup and reconfigure them after the update.
Below threads discussed the similar issue for your reference:
IIS, Default website, Exchange and our company website
Exchange Server 2016 CU11 install
Installing exchange CU precautions and effects on custom configuration
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.