Yeah I don’t think that’s true at all. It’s a minor nightmare as well in an enterprise setting trying to lock down their attempts to change defaults, push copilot, lock down office smart services etc.
Even though they are in fact considering the enterprise market as a key customer. I used to manage Apple devices (iPhone but also Mac which was much more work) for a long time and that was much harder.
For example, for a federated Apple ID you can still, after 5 years since release, not use federated Apple IDs if your Azure AD UPN and E-mail are not the same. In like 90% of enterprises this is not the case but they just won't fix this. Apple thinks we should just change our entire org for them. Well with Macs taking up 0,5% of our installed base that's just not going to happen (and this way it's not going to be much higher either).
Not to mention all the terrible Mac ports of windows software like VPN, Security etc that don't follow Mac concepts or installers. You have to pile workaround upon workaround.
