As a layperson, I just wondered if a lot of these companies have been better off if they just kept everything up-to-date and implemented strict policies regarding email links, downloads, USB devices, etc, instead of having a full blown EDR. I know that's probably a silly idea and not even...