Actually Intune handles MacOS reasonably well, you don’t need Jamf; that’s the way we went, and it’s okay-ish for the most part. By far the annoyingest thing is getting Macs bought before we went down the Business Manager integration route into MDM.
You think there’s a standard way to do that? Just install company portal? That worked in exactly 1/20 cases. It’s an exciting new error on every single device. Awful. Just awful.