Managing MDMs this poorly is a choice
We used autopkg and munki to automate this 15 years ago... and there are way better ways to tackle this now
Use VPP where applicable, backfill with
@PatchMyPC or similar, or at least put a brew upgrade script in self service if you're lazy
bro i hate org mdm shit more than anything else in the world
i can install whatever i want via homebrew
i am not allowed to update anything
i am not allowed to uninstall anything