0. Government or affiliated that require scap/stig or other compliance frameworks like fips140 or hipaa and actually use stuff like fapolicyd or aide.
1. Large companies that build "support" into the risk matrix for leadership who are obligated by law to protect shareholders.
Other companies that just "use Linux" probably use alma or rocky, but certainly aren't joined at the hip.
Personally I hope this comes back to bite big blue. For this to have any effect on Oracle you'd need to have started doing it like a decade ago before they too started eating customers from #0