Policy configuration shouldn’t be an ai wizard, it should be a dsc configuration and reports to show devices failing to meet the desired state. There should be policy templates that actually align to benchmarks like cis, just like Open Intune Baseline, but produced and delivered by Microsoft. Not the impossible to maintain baseline policies.