[smarx007]

Is the author sure that it's a bug and not just Apple holding back the new update for the MDM-enrolled machines for a week or so? See https://support.microsoft.com/en-us/windows/defer-feature-up... for a native feature in Windows to defer feature updates by X days specifically (quite cleverly, it does not defer security updates, only new feature updates).

[groobongithub]

Yes, I'm sure. MDM does have a feature to defer updates (which is a mess on its own) but that's not what is happening here. The MDM can see the update, but attempting to install it fails. The logs clearly indicate that the client tries and fails the download.