Realistically though those are organisational decisions not requirements of the Windows platform. there's nothing that mandates that a windows environment must

Realistically though those are organisational decisions not requirements of the Windows platform. there's nothing that mandates that a windows environment must have AD/Group Policies or Anti-Malware software, you can configure a stand-alone windows 10 PC quite happily without any of those. Personally I work in a Windows environment but don't sign into a domain. It's more that organisations demand that windows, which they understand, be configured in a specific manner. Some might say "ah well you've got to have A-V on windows or you get malware", but at actual technical level there's not a lot of reasons that MacOS is less susceptible to malware than Windows, and indeed its rise in popularity has seen more emerge