Hi Jonathan — agreed, and this is already being worked on. The change in testing skips group selection when Local Groups is the only option and exactly one group is authorized: you scan, pass Face ID, and the login goes through the way it did before. It happens automatically, with no setting to turn on. If more than one group is authorized, or domain groups or OUs are in play, you'll still see the picker.

It's a mobile app change, so it'll arrive with an app update. No date yet, but I'll update here when it's out.