Coffeebreak What XDR/endpoint monitoring you have in mind? From the big players there's only crowds strike, but they need MDM to deploy afaik, so no go currently.
Also, honestly, unless this is a company provided device used strictly for work, I'd not deploy any of such solutions. It's not even that I would be afraid of my employer snooping around my stuff, but simply the drivers needed to operate such thing are written like shit by a temp intern who didn't even graduate yet..