I appreciate the Filters capability for assignment of Apps, configuration profiles and policies - very helpful! However, Filters are NOT available for policies/profiles created in Endpoint security (Antivirus, BitLocker, Firewall, ASR rules) - it would be great to have Filters capability in Endpoint security (policies/profiles) as it is in Devices/Configuration profiles.
We started using Endpoint Security (policies/profiles) in addition to Device profiles - as I understood it was a recommended MSFT approach, and in fact, it makes management and monitoring of security baselines easier - trying to maintain that approach, and avoid moving back to Device profiles when environment complexity grows and would benefit from device Filters ...