My guess is that cybersecurity zero-day’s are so common that teams are worried that they don’t have the bandwidth to handle them in time which is the reason for using something like crowdstrike to begin with (“why have our own security team, which costs more money, when we can just install this software, which costs less money”)