Baselines in SCAP/Nessus audit format

Yes, as the still open issues show, it is not without flaws and why should the customer take the responsibility for converting security baselines, that should be job of the software vendor ? Shouldn't be everything from the baseline already be in the OS itself, secure by default ... As I proposed on the mentioned Repo: convert it, test it , commit it. Please offer long due alternatives to Grouppolicy's and give customers a reason to switch to a modern configuration management.