I have filed feedback on this with both the Feedback Assistant and via our AppleCare Enterprise Agreement. This most definitely needs to be two separate MDM payloads, one for normal point updates, and one for major version macOS updates. Based on the response that I have received, Apple knows that this needs to be separated. Keep filing that feedback!
DJGREEN
Users receive reputation points by contributing quality content to the forums.
Posts include post and replies published on the forums.
Post authors can mark replies as Accepted to indicate successful solutions.
Apple Developer Forums admins can mark replies as Apple Recommended to indicate an approved solution
User for
From
Watertown, MA, United States