Uninstalling Sophos issue

We are in the process of removing Sophos (we only used it for device encryption) from about 1000 computers. I ran into two devices so far that had apparently been deleted from Sophos Central by mistake https://tutuappx.com/ more than 90 days ago. Now I can't uninstall Sophos because they think that tamper protection is on.

What are my options to either 1) add the device back into Sophos Central or, preferably 2) uninstall Sophos completely. Bonus points if the solution can be done remotely, by CLI, PowerShell, or Microsoft Configuration Manager (SCCM). We do not have AD sync turned on, and I would prefer to keep it that way.

Added TAGs
[edited by: Gladys at 4:27 AM (GMT -8) on 19 Dec 2022]