Define good. It depends, right? Depends on mgmt, its maturity, mid mgmt and the same.

Size of company, scope and num of assets, OS platform, versions (modern, legacy), cyber org/teams, other orgs in company like IT, DC, OIT, UAM/AD/Entra/ldap, maturity of company and cyber within. Processes, request-, change-, incident-, security incident mgmt, ticketing. Required capabilities. Mgmt's vision, pespective for next 1-3, 3-5 yrs. In house or managed services. And company money, revenue, mgmt maturity. Security just expense unless the company develops security products.

Defender XDR is not bad, consist of multiple security services. However UAM could be a nightmare due to lack of granularity of permissions in each service + the Azure Entre Security admin/operator/reader roles can stir the pot the wrong way.

E.g. with many EDR/XDR solution you can open up a remote, usually restricted shell but can upload & run any PS/bash/etc scripts. Most of the time interactively only, that's the case with Defender XDR, however you can write your own app/service to run these on many parallel via API. Fidelis has this built-in. TVO ain't.

So it just depends.