@LA1976 GPO is the recommended way to implement these settings. Regarding this statement "why not be able to download the json from the portal to have it converted to DSC or GPO" <== this capability is not currently available.
We are revisiting this UI, and we should bring some changes to the way these recommendations can be implemented. I don't have a ETA to share, but changes are coming to this experience. Thanks for sharing your feedback!