As you already know you can control updates for Windows devices with Intune.
Well, good news, you can now do the same for macOS devices.
To manage which updates and when they are being installed on your macOS fleet, connect to your Intune portal (https://endpoint.microsoft.com/) to access the Devices\Update policies for macOS blade to create your profiles
When creating your macOS update profile you can choose what to do depending of the update criticality (critical updates, firmware, configuration file or other updates) and when the updates will be deployed to the device
