All these things you mention are not “administration” in a “manage systems that end-users use”, they are “manage devices” activities. Macs have the literal worst business/enterprise administration administration/manageability experience. At previous $client, they had in excess of 30k desktops, and in excess of 50k total endpoints.
They spawned a new opco, and that new opco wanted all macs. 12 months along, that was all thrown out because of the ongoing challenges of securing, managing, and administering the devices, and supporting the userbase. It wasn’t even a TCO thing (that was also wild, about 4x over a “regular” workplace, that being either Win10 or a supported Linux build), it was a “we never want to see Mac’s in the entire global organisation ever again.
Macs have their place. There are plenty of environments where they can function adequately. Medium and Large Enterprise isn’t amongst those, and that is 100% due to the dire administration experience.