That just means your IT department isn't putting in the effort. Antivirus, remote management, MitM proxies, software permissions, macOS can do everything Windows can, it just takes three or four subscriptions and double the effort for the IT team.

macOS makes it kind of difficult to do these things, so when companies do deploy the same control they use on Windows, the problem actually becomes worse, because every management tool now needs to rely on hacks rather than officially supported APIs.