I remember being told more often than I can count that it is nest to leave stuff like this to the experts who all day long do nothing else. Like actually being

I remember being told more often than I can count that it is nest to leave stuff like this to the experts who all day long do nothing else. Like actually being told that as reason to use Microsoft AD. Or the nobody is better dealing with spam than Google (when I was at a G Suite company). Or never to roll your own security library. All these were in the same ballpark and in some occasions the latter one was used to drive home the others. I am not sure what to do/say about it. I am not (by trade) an IT person but hopefully learned a bit in my time. Trying to understand how all the different tools on my corporate device work (together?) to enhance security is impossible to me. I can't name them but from anti virus, to compliance checking to additional compliance checking by VPN software to endpoint monitoring to remote install capabilities to windows management to remote desktop capabilities and many more. To me this sounds like too many potential attack vectors waiting to be exploited.