A service that simplifies device provisioning and setup for end users, enabling zero-touch deployment
Yes, I would recommend to collect all apps which are required for ALL computers to be in place and assign them to Autopilot ZTD - AAD group. Though, sometimes VPN and antivirus might be complex and make Autopilot ESP to fail. If so, you can then take them away from ESP listing and make them install after autopilot is completed. I had some challenge with Antivirus, because it production code changed rapidly during installation for detection method. VPN might then interrupt internet connection. It all depends on how the installers for these are made and how you package them. Just test and test :)