For example, in Azure, there are some environment variables that modify the behaviour of the CCM. If the user adds these env vars, because CCCMO uses Server Side Apply, we do not overwrite this additional config.

This means that the end user can break their CCMs in an unsupported manner. To prevent the user from getting themselves into an unsupported configuration, the config for CCMs should be forced (ie switch SSA to normal Update)