I hesitate to make blanket statements, but at this point, by and large and for most companies, Windows Defender (particularly with supplemental services from Microsoft like OneDrive backup, and Intune (some way to enforce configuration), etc) are more than fine for most companies. Spending money on third party AV solutions, particularly those that MSPs are making margin on with complementary hardware solutions (cough, sophos), are a rip-off.
