MVPs on manageability: reflections from the MVP Summit

What's the best approach to provisioning Multi-User devices in a Hybrid scenario as Self-Deployment Autopilot is not an option for Hybrid devices. Unfortunately there are some environments that have legacy applications that still use device based auth (stopping us from deploying Entra ID only devices) and tight budgets mean delivering those application using a remote app is not a viable option. Some of the documentation (be it a few years old) seems to suggest using user driven autopilot with something like a DEM account to get the device Autopiloted in a Hybrid state, then removing the primary user from Intune...but this seems clunky and isn't specifically outlined in the docs as supported.