That just means your IT department isn't putting in the effort. Antivirus, remote management, MitM proxies, software permissions, macOS can do everything Windows can, it just takes three or four subscriptions and double the effort for the IT team.

macOS makes it kind of difficult to do these things, so when companies do deploy the same control they use on Windows, the problem actually becomes worse, because every management tool now needs to rely on hacks rather than officially supported APIs.

Agreed. It’s a mess of confusing configuration spaghetti, my comment was not meant to imply quality (and that’s leaving aside asinine corporate policy). They’re pretty much the only game in town though sadly.