Exclude those devices that have an incompatible OS from the Microsoft Defender Health Incompatible Dashboard.
Once known devices have been excluded and the count reduced or reset to zero then any new devices can be investigated and accounted for appropriately.