"We built a VNC + OCR system that clicks through macOS Setup Assistant automatically" - that is both awesome and annoying. I guess I assumed that Apple supported some form of unattended setup.
So we just click through like a human would via VNC. Version-specific but works with their security model rather than against it.