Something to consider, as Tribruin mentioned, would be to not have a
local admin with the same password on each endpoint. What we have done
for my org is move to a script based elevation and locked that behind
user based login in self service. So onl...
We have discovered that with this upgrade the need to run the
erase-install is no longer needed. Users are free to install the update
any time without the need for admin creds.