Sure but for most of these companies conducting a security audit of their AV solution is very much not something are going to be competent at. The typical audit

Sure but for most of these companies conducting a security audit of their AV solution is very much not something are going to be competent at. The typical auditing companies they might hire for there compliance reasons are also not going to be competent at it. As a result, due to a lack of knowledge and a need to check boxes, they will be choosing AV solutions that lower their security. It's a perfect storm. Especially since many of the ones on the list are considered best in market for these people.