I can explain how Microsoft makes money off its anti-virus if you'd like. It's only free for regular users but as soon as you need enterprise security measures (e.g. tracking exposure across your org, isolating parts of your network etc) it costs money.

So the built in anti-virus is in fact "free" because it makes selling the enterprise version easier.