Looks like the path was just incorrect in their profile
12/14/2020, 6:00 PM
Ah yep, that would do it.
12/14/2020, 9:11 PM
Actually it appears it was working all along. They were just looking at the "Security & Privacy" settings for launcher to be listed as permed. Evidently it's not listed there if that perm is put in place by an MDM policy.