EDubs
The more I think about this the more it bugs me...
I agree that there has to be better solution. I hope there will be something coming to Intune in a same way to Windows Update for Business and it's deployment rings. That would make more sense to me. I'd best see if there are any jobs going on the O365 team in Redmond - lol
Go modern management & improve security...Hmmmm, just at a randomized pace with an "old shcool" shim to provide a level of scheduling which most businesses/large enterprises require from the outset.
I'm lucky in my scenario as direct access provides connectivity for GPO etc. Just glad we aren't further down the modern path with internet only devices as this would have caused a significant challenge.
Winge over, now to see how Windows Update for Business goes..