Tacking onto this request, I think it's also worth separating a third category - partial auto remediation. This is actually the most important in my view as the UI is currently deceptive unless you go in and read the descriptions properly.

For example, LAPS, the auto remediation turns on the capability, but to actually have LAPs working we need to manually create Intune policies. There is no way from the UI currently to tell if these settings have had their manual tasks done.

I would suggest either separate out all the partially automated security controls, or disable auto remediation on these.