We just started buying M2 Macs at work, and oh boy, they are lightning fast, robust refined HW and the battery life is incredible. It’s a check-mate for the personal computing industry, pending they get their enterprise MDM features in shape (ie Intune) and get more apps ported to macOS.
For those wondering, just in the last few months you can now bind a M2 Mac to InTune and remotely manage most things. You can’t login to the system with Office365 email yet (coming soon), however you can block personal AppleIDs, push a managed AppleID that uses Office365 SSO without any third-party plugins, and remotely track every device using FindMy. And yes since it supports InTune you can push and deploy endpoint protection and company apps.