In SCCM, it's very easy to identify systems based off what specific apps they have installed what versions of apps are installed, etc. with clear understanding of how up-to-date the data is (as you mentioned with Device Query). Is there a way to get reporting like that from Intune specific to installed apps (regardless of whether the apps are installed/managed via Intune)? If so, is there a way to scope deployments based off those types of app-specific queries? Often times, with SCCM, we'll scope deployments based off what apps are missing, outdated, etc.