This one is absolutely a necessity for supporting enterprise clients. While it would be great for day-one or even day-90 readiness, it's just not always feasible. Too many hats, too many hurdles. Please give us control over all software updates from MDM!

Please fix this. This is not expected behavior if you manage a fleet of Macs.