Maybe they all need nonstandard software? God forbid, maybe they need administration permissions, but the org doesn’t want to give it to them, so they end up calling in every other day to get something unlocked (I know that’d be true for me).
Maybe it’s the problem solving skills of the IT team when it comes to mac, so people keep coming back with the same issues (good ones are Outlook/Teams being permanently broken, or VPN not connecting).
On the whole, I’d steer away from any explanation that would require all 500 mac users to be idiots.
MS makes it very easy to secure and admin at massive scale. You can roll out policies and updates to hundreds of thousands of machines with like 1-2 admins, and the other 8 IT people manage 200 Linux and Mac machines.
And everything just works out of the box with like... 3 lines of PowerShell.
You can replicate some of it with Ansible, sticky tape and a few spare weeks, but it's not the same at all.
I'm actually Linux admin, grew up with open source and spent my career serving pages and automating myself out of a job. I dislike Microsoft as much as the next guy, but for enterprise use they are _next fucking level_.