Upcoming changes to iOS/iPadOS Company Portal app deployment for Setup Assistant with modern auth

Instead of "Based on customer feedback" you should just be upfront about and call this a necessary downgrade to facilitate Just In Time enrollment in the future, as per AnyaNovicheva's in-depth explanation... I cannot think of any instance where "customers" (read Admins) would ask for the removal of deployment automation in favor of manual configurations...

That said, functionally, the Modern Enrollment with Setup Assistant is still flawed because there is a time-gap between the Setup Assistant and the installation/manual startup of the Company Portal where devices are already seen as fully compliant by the Endpoint Manager and will start receiving all targeted Apps and Policies. Anything that is not put behind Conditional Access will be usable immediately while strictly speaking Devices are not "Fully Managed" yet at that point.

The Modern Enrollment method does not foresee in this scenario and that makes it unreliable from a security perspective as it can result in a half-managed device with potential access to sensitive data.