This post in the API Announcement section provides the latest news. The Client EKU is no longer included in LE certs except if you use the tlsclient profile
There has been no announcement about extending the use of the tlsclient profile. If you haven't yet please see this blog post linked earlier: Ending TLS Client Authentication Certificate Support in 2026 - Let's Encrypt