These sort of vendor YOLO changes are more of the domain of Microsoft's MDE.

I use an Deciso OPNsense where it doesn't insist on breaking itself on the orders of corporate overlords.