Resolved - this happened because BigSur doesn't play well with "Approved
Kernel Extensions". Removing that from the configuration policy resolved
the issue.
I know this thread is pretty old by now, but curious if you found a
solution to the "Failed to check self-defense status" error. Getting the
same thing on a few MacOS 11.5 machines.