[kvz]

We do run that on our Linux servers. For macbooks, ClamAV makes very little sense. Besides, they mandate we centrally manage that, too.

[verdverm]

SOC2 compliance requires AV on Mac too

not sure why you think it is unnecessary, generally speaking

The choice is not hard, either install AV or get removed. You're not going to change their policy

[kvz]

The actual requirement is not: a centralized console where macOS antivirus updates are pushed to all user devices.

We take security very seriously but this is not the way.