Have you tried using the Update-MgPolicyIdentitySecurityDefaultEnforcementPolicy cmdlet?
Connect-MgGraph -Scopes Policy.ReadWrite.ConditionalAccess, Policy.Read.All
Get-MgPolicyIdentitySecurityDefaultEnforcementPolicy | select IsEnabled
Update-MgPolicyIdentitySecurityDefaultEnforcementPolicy -IsEnabled:$false