It’s not security, it’s compliance. The two are sometimes aligned, sometimes less so.

We've had production outages caused by Microsoft Defender our RHEL boxes :(

Yeah, they definitely would mandate it.

My work laptop is running Ubuntu, and corporate IT requires Symantec Antivirus to be running on it