Mac Not Compliant on Intune because of DefaultDeviceCompliancePolicy.RequireRemainContact

MS Support just closed my ticket without resolution. We tried syncing from the device, without success. They advised me to update my Apple Business Manager VPP token (which had expired). Then we updated the apps on the device with MS AutoUpdate, and tried syncing again. No success. Support's official advice is to reformat the device and re-enroll. It's a remote device and anything remote on a Mac is an interruption for the user. In this case, the user would lose a day's work helping me. Which isn't really an option. 

If memory serves, this is how it went last time. However, by the time I was ready to reformat, the device had aged out of Intune. At that point, we were able to re-enroll normally, and without further issue. This current device will age out in a week or two, and I'll see if we can re-enroll at that time.