@AmazingPhone6248, Thanks for posting in Q&A.

Based as I know, we can deploy the app via Intune for Android devices. For Android Enterprise enrolled devices, we can configure app configuration policy and device configuration policy. You can configure them and see if we can get a better sign in experience. Here is a link with the detailed steps you can try:

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/android-intune?view=o365-worldwide

Meanwhile, for compliance policy setting of Android, I find a setting "Require the device to be at or under the machine risk score". it will check the score evaluated by Microsoft Defender for Endpoint. when exceed the score, it will get marked noncompliant. Maybe you can try this setting to see if the setting can work for these devices which are not running Defender.

https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-android-for-work#microsoft-defender-for-endpoint

Hope it can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.