I wrote this script to work around it.
After changing CAP policy to static and CAPsMAN provisioning to create enabled, I manually created datapaths on each AP and scheduled this script to run every 5 minutes.
It's still terrible and I still hate that this bug exists but at least I don't have to log in to every single AP and modify almost every interface every time there's a change on CAPsMAN side.
https://gitlab.com/-/snippets/4883800