Seems like windows really is behind when it comes to this then, if everyone else has a proper solution. Still, I feel this is more on crowdstrike than Microsoft. For whatever reason they didn't have the right processes in place to avoid pushing bad code.