Allow MS autoupdate2 service to run in the background. This has two benefits;
1) It reduces troubleshooting/support efforts when Defender show ambiguous "out of date" warnings
2) Removes the ability for the end-user to disable it, since its managed by MDM.
Allows removal of MS defender system extensions without prompting the user
Seamless install should imply seamless uninstall. Lack of symmetry is disorienting to the user
Updates MDM Profile for MS Defender deployments.