I've known this for quite a while and have advocated for removing 3rd party A/V stuff from our fleet of macOS devices. Unfortunately, A/V software is listed as "required" from our SOC2 auditors and convincing them otherwise is not worth the effort. I wish NIST would recognize that OS vendor A/V is generally enough and to not worry about the 3rd party stuff.
