I'm also not personally a fan of Ansible, but to claim it doesn't really work is quite breathtaking given the size of the installed base.

Arguably, it doesn't. Instead of a team of people doing break-fix on golden images you have that same size team of people doing break-fix on upstream playbooks. Lots of software doesn't achieve the goals but has a huge deployment story; not sure those things have ever been related.