I totally agree we have the same. I logged a job with VMware regarding this and they to are aware that we can not manage this function. Alot of people have reported it and my call has been placed with these other calls for their devlopment team to look into. Unless anyone else has found away to manage these settings, even if it is just to not allow the users access to the SIM CARD MANAGER.
I am not sure if others have this problem, but our console does not even display both phone numbers on our iOS devices(one eSIM and one physical sim); let alone have the ability to manage the lines differently. So, I would recommend a good start would be at least displaying both numbers and properly labeling them(eSIM vs physical, sim 1 vs sim 2).