Re the 9 vs 10, thats a great question! Assumption is that its related to deprecated API's, but i could be way off.
We actually use an app group to whitelist these apps combined with an App control profile for AE devices. This forces those apps to come down during enrollment. the only flaw with this is the app control profile has to be removed before any app thats added to the app group can be removed/uninstalled.