> Nobody would pay crowdstrikes prices if it didn't stop attacks, or improve your detection chances

In my experience people pay because they need to tick the audit box, and it's (marginally) less terrible than their competitors. Actually preventing or detecting an attack is not really a priority.