They might not need them, but I'd be surprised if at least some companies don't install security BS on them anyway (just like they do on Linux machines), becaus

They might not need them, but I'd be surprised if at least some companies don't install security BS on them anyway (just like they do on Linux machines), because of compliance reasons. It can't hurt, can it? (at least that was what most IT departments thought before CrowdStrike)