Will apps.microsoft.com installers be brought into the fold to follow settings like the built-in app store? Having students bypass the app store restriction by using the website is a large security hole and using workarounds to patch it is clunky and annoying. I have not investigated the new command line store but I fear it is another hole in app security and management.

Will there ever be a way to create a dynamic group of devices that have a particular program installed in Intune? I have this set up in Config Manager and this helps with program deployment. 

I have applications that autoupdate. This makes managing detection rules challenging. It's tempting to use the "IF Program Files <program> folder exists" rule, but that can cause headaches when the time comes to deploy a new updated app if it uses the same folder. In some cases, the ProductID code is the same. I would absolutely love an easier way to manage the detection rules for .MSIs and .EXEs that autoupdate. Is that something that can be considered? 

Microsoft are offering via Enterprise App Management a curated list of pre-packaged vendor software as an alternative to using Winget or the MS Store but in the most part this curated pre-packaged list just leverages the vendors built in silent install switches.

Given Microsofts push towards MSIX (which has been diluted by opening up the MS Store to Win32 apps), it would be great if under the Enterprise App Management feature MS were able to repackage and offer up vendor apps in MSIX format where the vendor doesn't provide them as such.