I support a large number of Apple PCs running MacOS in enterprise environments, they are flabbergastingly a pain in the arse to manage.
What Macfags say : "Just get Jamf, it's sooo easy!"
The reality : "Gee, I guess I gotta write yet another fucking bash script for this exceedingly simple task"
Extensible SSO and Platform SSO are shit, and basically do not work.
You need it to be domain joined to authenticate users against Active Directory? Good fucking luck. Enjoy your random password resets and inability to remain a member of a fucking Windows server domain. Oh, you want to update reverse DNS records on the Windows DNS server? Yeah, good fucking luck with that too bro.
Let us not forget how extremely tarded the software is too. Companies still using a physical fucking USB dongle for licensing some of their products, like it's the 80s. Finder being so shit it's quicker to just open the Utilities folder directly to get to a terminal.
Then there's the userbase. Last month, new CEO asked for an Apple laptop. They got a top of the line Macbook Pro. The first things they asked to be installed on it were Edge, Microsoft Office, Teams and MS Project. MS Project doesn't even fucking exist, so they had to get a top of the line HP Elitebook also just to run it in Windows. This is why Apple Mac PCs have no place in an enterprise environment.