I agree with the filtering point also. If I target all devices and use a filter to make an application required, then later decide that a specific group of devices should have the same application available instead, that approach does not work as expected because those devices could already excluded by the filter logic. My main takeaway from this is that naming conventions and planning are critical when setting up Intune. A clear structure from the beginning helps avoid assignment conflicts and makes future changes much easier