Nice question! I am also wondering how it helps for the IoT devices...
Up to now, What we found out is that Pull way makes more sense instead of Push way for the fleet of more than 500Ks devices in the field.
We use Ansible Pull, but would also considering of such a way through GitOps approach.
Not sure, if it would be also provided via Pyinfra to get such stuff via Pull way.