The allowedMcpServers setting description has been enhanced to clarify that it "applies to all scopes including enterprise servers from managed-mcp.json" and that "denylist takes precedence — if a server is on both lists, it is denied."
Evidence
Enhanced description (search for "Denylist takes precedence")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.