In response to your bonus question, I've been having this problem for
almost 2 weeks now. I noticed Sophos stopped installing during
enrollment on every M1 computer, and wouldn't install via script either.
Honestly haven't tried on an Intel device ye...