Microsoft or giant piles of poo like crowdstrike?

Crowdstrike is not what is slowing down my Mac. Web pages in Firefox that somehow take up 1GB of RAM are.

Por qué no los dos?

Ask serious security folks at serious orgs if they can afford to not run crowdstrike regardless of OS.

Can any serious security folks at serious orgs confirm they can't afford not to run crowdstrike?

We don't deploy Crowdstrike to our Macs. (Small org, 500~ Macs).

The alternative it a strict zero trust network design with very internet access only via RDP or similar protocols. Not many companies are willing to do this.

Enterprise Mac is a bit of a contradiction because Apple doesn't really make enterprise tools, you still end up joining them to a windows network and using windows file sharing and printing.

What's the proper way of managing Mac endpoints?

Any modern MDM like Jamf, Kandji, Mosyle, etc. + the identity/IAM of your choice (most commonly Entra or Okta)

Since SIP, it's MDM with DDM and you can basically leave engineers be local admins as it has no impact on the system state anymore.

JAMF is popular. I've heard of Kandji too.