Windows admins are some of the worst, especially in government. They don't understand how computers work, and so they pipe on anti-virus, anti this and that, hoping a product will magically solve the issue. But they won't move the default browser, or install an ad blocker. They won't put in policies preventing running the software in the first place or isolating its abilities.

After years of having terrible, exploitable software on windows, it's the natural result. Some manager gets a pdf exploit, and on windows there's simply nothing you can do about it. But IT has to do something, so to make them look good they throw another anti-virus on.