Yes Apple have said for some considerable time that imaging is dead and to use DEP. However It has been possible to use DeployStudio to run the macOS Installer and then a 'normal' DeployStudio workflow and furthermore Apple have failed to provide a means to add pre-DEP purchased machines meaning those machines cannot be DEP provisioned.
I was therefore with Mojave even with T2 Macs able to use DeployStudio to install the OS and then do basic configuration and run the QuickAdd.pkg to enrol.
With Catalina I have got partway but hit problems. (This is to wipe and deploy Catalina on older pre-DEP Macs.)
By having a Catalina boot drive on which is a copy of the DeployStudio Runtime I can connect to the DeployStudio repo and install Catalina via. script which triggers startosinstall and hence this also correctly does firmware updates. I have discovered that to enable scripts and file copy commands in a DeployStudio workflow I need to add /bin/sh to Security & Privacy full disk access. What I am currently stuck on is running 'postponed' installer packages.
It would seem that since these being postponed obviously run within the destination Catalina OS and that had not been told to authorise these processes so they are blocked by its Privacy settings. This is probably not going to be resolvable but it would be worth hearing other opinions.
