Comment by mapontosevenths

> EDR/AV is basically unnecessary,

No, its not and never will be.

Even if it were technically unnecessary (in some hypothetical future where privilege escalation became impossible?), legal, compliance, and insurance requirements would still be there.