We're in the healthcare space where if you have an iPad (and rarely an iPhone) we are fairly aggressive with regards to upgrades.
The major drawback of this is it can be disruptive to users if they do not update themselves. The forced installation and restart is the obvious one, but the passcode clearing also forces them to set a new passcode that adheres to our password reuse policy.
We can’t do this because our iso would likely never approve the reset passcode. I was just in a webinar and it sounds like Jamf is going to allow you to push major upgrades with deferrals right from Jamf. Not sure when this is coming, but it sounds like it will solve all of our problems.