Compliance based stuff... "do you trust this machine to access your network/services/applications and execute these commands?"
https://www.crowdstrike.com/cybersecurity-101/endpoint-secur...
(the VMWare owned product isn't CrowdStrike, that just had the best SEO page with a clear description. VMWare have Carbon Black which is the other dominant player in this market https://www.vmware.com/uk/products/whats-new/carbon-black.ht... )