Endpoint security and production security are totally different things, usually done by different groups, with different threat models.

I also wouldn't characterize it as "harder to secure" but rather "extra work to support." A homogenous endpoint fleet makes all IT tasks significantly easier, and endpoint management tools for Linux tend to be less mature and more difficult to work with.

I expect this one to go the way of Internet Explorer.

Only 1 browser to secure! Infosec requires an activeX compatible browser for installing expensive security contraptions. IT can't possibly tolerate Firefox! What, there are more browsers out there? What, Microsoft creates a new browser? What, marketing sent out a new campaign only viewable in Chrome? What, our own site doesn't work in Internet Explorer, and nobody noticed in 2 years?

After fighting their own users for over a decade and looking very sad-kitten-face when every single one of their dastardly back-stabbing users did not follow the holy dictates from above, enterprise IT found out it was actually possible to secure a browser that was not internet explorer. I expect Linux to go the same way. In fact, it did just that for servers.

The Linux instances are hosted on AWS and as such the responsibility of the SRE team :-)

It is harder to find anti virus software that runs on Linux, at least I am told.

>anti virus software

Ah the snakeoil that drive a whole industry ;)

Different team I am sure (in an org of any size), but yes, the irony is obvious.

I assume in lots of cases devs have a fair amount of leeway in installing stuff locally, maybe if you set up a VM you run a whole desktop in there.

Linux servers don't usually travel the world. MDM tooling is pretty bad for Linux.

You can make it work but it requires more effort than most corp teams are willing to put up with.

>Linux servers don't usually travel the world.

True but often 24x7 connected to the world...but yeah you are right, not often do you loose a whole server ;)