Some of the things you mention here are organizational implementation, potentially making things more difficult to support. For example, attestation is not enab

Some of the things you mention here are organizational implementation, potentially making things more difficult to support. For example, attestation is not enabled by default. An admin enabled that, and didn’t automatically allow-list common AAGUIDs. TAPs can be programmatically generated in batches for a roll out.