When deploying the agent to new machines why do we need to install the
agent, reboot and then accept the update, and reboot again ?

Why cant the update be a new msi that runs ?

To clients already deployed in the environment thats fair enough, but
new machines should not take 2 reboots and 2 separate installs.