Are you already using custom compliance policies for Windows? It's a nice feature, isn't it? Wouldn't it be cool to have something similar for macOS devices to use it in conditional access policies?