No matter what we did, the Android 12 update kept getting paused, unless the phone was switched over to mobile data. It ends up that Android updates were getting blocked by our DNS security service. Googlezip.net is blocked because Android’s Data Saver feature enables a proxy that allows users to circumvent DNS policies. This feature also allows Google to see all of your web browsing; this is a major privacy issue.
The solution is to let your service block googlezip.net or more specifically proxy.googlezip.net, but allow ota.googlezip.net. You may also have to allow ota-cache1.googlezip.net and ota-cache2.googlezip.net.
Photo Credit: https://unsplash.com/@adrien