As a follow up for future people I created a fixlet that runs the following every fifteen minutes.
(version of client >= "188.8.131.52") AND (exists true whose (if true then (exists (if (exists wmi) then (string value of select "Name from Win32_ComputerSystemProduct" of wmi) else ("N/A")) whose (it as string as lowercase contains "Thin Client" as lowercase)) else false))
waithidden cmd /c "%systemdrive%\windows\sysnative\uwfmgr.exe file get-exclusions > %systemdrive%\ProgramData\uwffiles.txt"
waithidden cmd /c "%systemdrive%\windows\sysnative\uwfmgr.exe registry get-exclusions > %systemdrive%\ProgramData\uwfregistry.txt"
Write Filter Status
(select "CurrentEnabled from UWF_Filter" of wmi "root\StandardCimv2\Embedded") as string = "CurrentEnabled=True" as string
UWF Excluded Files
lines whose (it contains ":") of it of file "c:\ProgramData\uwffiles.txt" of encoding "UTF-16LE"
UWF Excluded Registry Keys
lines whose (it contains "\") of it of file "c:\ProgramData\uwfregistry.txt" of encoding "UTF-16LE"