AMA: Managing Windows with Microsoft Endpoint Manager

Thanks Heather, some of these may be slightly out of scope, but here's a start:

• Feasibility of adopting purely MEM over MEMCM Co management for managing a relatively large enterprise.  What does MEM currently lack when compared?  Reporting capabilities?  Anything planned to bridge the gap here?
• Encouraging the adoption of Azure AD joined devices, and migrating group policy.  The enhancements and additions to the settings catalog are most welcome.  Mixed feedback from the community on whether to adopt Endpoint Security Policies over your own Device configuration profiles.  Is one preferred over the other, and any pitfalls to be aware of with Endpoint Security besides having to periodically update the Baseline?  Are there any enhancements planned for introducing something similar to the way Group Policy preferences used to work for ease of management?
• Managing Microsoft Edge extensions via settings catalog.  Allowlist is currently capped to 100 entries.  Is the an alternate approach to managing these based on permissions they request, like you can achieve with the Google Admin console for Chrome?
• Any official guides available for exporting intune data to another SIEM for reporting on things such as User assignment, App inventory, Device compliance etc