Sophos Central - Release of Central Windows Endpoint Core Agent 2.15.4 and Endpoint Advanced 10.8.10

So just curious -- why the change at all?  Seems the new process is even easier than the last one.. or was that the point?

We have updated the "Sophos Endpoint Defense: How to recover a tamper protected system" KBA with instructions for devices funning the new Core Agent, see: https://support.sophos.com/support/s/article/KB-000036125.

You can therefore still achieve the same, the process is however slightly different.

Can you expand on these:

• Enablement of Tamper Protection in safe boot mode.
• Enablement of Update Cache functionality for Windows 10 devices

There is no info in the release notes regarding either.  I suppose the Update Cache functionality lets us use Windows workstations as update caches now (nice, good for small branch offices)... however would like more info on the Tamper Protection changes; sounds like maybe Tamper protection is now persistent in Safe Mode... so if that's the case, how can we remove the product if something goes horribly wrong?  We used to use safe mode for that...