is it bad practice to run hourly snapshot queries across 50k different devices? Or should we limit snapshot queries to daily interval and only have differential queries be hourly?

Not necessarily... If the volume of data going into your logging pipeline is worth it for the value you get then seems probably reasonable.

gotcha, that's great to hear that I'm not crazy 🙂