Sounds nice.
I know Wimpy (npub19c6…ttya) does something similar, but with the #elementaryOS Pantheon DE instead, if I remember correctly. I think I would prefer that. I really like Pantheon.
But overall the setup sounds very reasonably thought through. I wish I could convince the others at work to give this a solid look for a way to do 'central company laptop configuration'
Doing Ubuntu LTS jumps is honestly a huge pain in the butt every other year.