You have to also factor in competition. I think it's a big factor on why corporate IT is generally bad, Microsoft and their partners have no reason to improve on the status quo. If we had viable alternatives, in a market where no entity has more than 20% market share or something like that the standards would be much higher.
The whole idea of running a backdoor with OS privileges in order to increase system security screams Windows. In Linux, even if Crowdstrike (or similar endpoint management software) is allowed to update itself, it doesn't have to run as a kernel driver. So a buggy update to Crowdstrike would only kill Crowdstrike and nothing else.
And Linux is not even a particularly hardened OS. If we could take some resources from VC smoke and mirrors and dedicate them to securing our critical infrastructure we could have airports and hospitals running on some safety-critical microkernel OS with tailored software.
