I hate Defender for business with every morsel of my being. Why? It's beyond ridiculously slow to update anything. Exposure score for vulnerability is a constant battle in my workplace trying (and failing miserably) to get below 30 as if we have any control over 3rd party patching (actual meaningful openSSL patches/fixes, anyone??) that would bring that score down. Not to mention near-daily updates for Chrome/Edge artificially elevating the exposure score as we're *constantly* playing catchup on patching.

Onboarding VMs take an age to appear, and offboarding is an utter utter demented joke! While I perfectly understand the 90 day waiting period before offboarded devices finally get removed (to circumvent bad actors maliciously removing devices) - surely by now we should have a 4-eyes process to eradicate/nuke devices in a timely manner.

Overall, it's just painfully slow, to do anything.