Business Premium without a doubt, just look at the added value: https://m365maps.com/files/Microsoft-365-Business-All.htm More on reddit.com

The big one is you are limited to Secure Defaults with no capabilities for granular Conditional Access Policies. Also no Intune, no Azure AD SSPR support. In my opinion Business Premium is worth every penny More on reddit.com

The endpoint licence. I forgot the name, endpoint business maybe. Its a mix of some features of endpoint plan1 and plan2. Thinking about security, you can use condicional access Thinking about facilities, you can use SSPR. Reduce support hours. More on reddit.com

You need the guidance of an MSP in my opinion. There are decisions here that can have large ramifications for years down the road. Whether or not MS business premium is a good choice for your organization requires a lot of information about how your company operates and wishes to operate in the future. Edit - for the security side, ask your business insurance company for a cyber security insurance application. read through the questions for a reasonable list of security issues you should be considering. small businesses often do not implement all of the things the application will ask about, but they should know *why* they are not implementing them. More on reddit.com