This was added a while back but the post wasn't updated. The "For macOS devices, deploy as a device profile instead of a user profile." option now exists in the Passcode Policy profile settings to control whether it is deployed via device or user channel.