I agree; it would save me a couple of taps. In the old days we could use Apple Configurator to push the apps anonymously, but Apple has since changed some of their deployment strategies. Not to mention fighting with connecting hundreds of iPads to carts for syncing. The entire idea of hooking up a mobile device to do anything bothers me. Even the charging part, but we must wait on the engineers to catch up with Tesla. I digress. The apps are tied to the machine that pushes them. This requires passwords to update, and causes issues for users that delete an app and want it back. We CAN push everything except the initial free apps from apple. We don't currently get credit for an app when we purchase a new device. Apple waits for that device to initially log into their server, verifies that the device serial number has never been seen before and issues redemption codes. The codes could be used by any account signed in. If we let end users do this, they would sign in with their personal account, get free apps, get fired two months later or change positions and turn the device over to the new person which would then be without the apps. At this point we could purchase the apps, but this can quickly become very expensive with our deployment numbers. If we initially deploy the apps to our account we retain ownership.
Again, this is only an issue with the initial free apps from apple. We are trying to save the tax payers a little bit of their money.