You know, with all this money we pay to Jamf you'd think there would be an easy way to make sure all the endpoints get essential OS updates, but you'd be wrong about that.

I don't know it will get better with the new os either

Really? Can't you set a policy for Auto Updates to "On" and check all the options for "Security fixes"?

It's amazing how difficult this is. But also Apple is an unserious company so I would probably blame them before Jamf.