The article is about Epic, a terrible medical journal software. What you say differs between IT environments and clients. We usually just deploy EDR/MDR like S

The article is about Epic, a terrible medical journal software. What you say differs between IT environments and clients. We usually just deploy EDR/MDR like S1 or Defender (Defender that comes with Windows) and deploy settings, so you cannot have a crazy long uptime and force Windows updates, yes you need those. According to some standard body like NIST, you are now supposed to have a longer password or passphrase that never expires.