Well if it works and you are happy with it don’t change unless you have a good reason. The only thing that others might have mentioned is that depending on your m365 license you might already be paying for defender. More on reddit.com

I have been working with the Defender suite since 2020 and Microsoft have put a lot of effort to make it one of the best XDR solutions out there with continuous improvements. I have not used other XDR solutions so I cannot compare it against other products. My only advise would be avoiding all these YouTube videos where they run multiple ransomware files against Defender, as neither the devices used in the test nor Defender have been hardened properly. More on reddit.com

https://learn.microsoft.com/en-us/defender-office-365/mdo-portal-permissions#create-email--collaboration-role-groups-in-the-microsoft-defender-portal You need to be assigned permissions before you can do the procedures in this article. Admins can take the required action on email messages, but the Search and Purge role is required to get those actions approved. To assign the Search and Purge role, you have the following options: Microsoft Defender XDR Unified role based access control (RBAC) (If Email & collaboration > Defender for Office 365 permissions is  Active. Affects the Defender portal only, not PowerShell): Security operations/Security data/Email & collaboration advanced actions (manage). Email & collaboration permissions in the Microsoft Defender portal : Membership in the Organization Management or Data Investigator role groups. Or, you can create a new role group with the Search and Purge role assigned, and add the users to the custom role group. More on reddit.com

If your company is an MS partner setup yourself your own lab use https://cdx.Microsoft.com for subscription with Security licenses and full of pretend test users all happily shaping Contoso files and email Activate free credit part of Visual Studio https://azure.microsoft.com/en-us/pricing/member-offers/credit-for-visual-studio-subscribers for Azure and Sentinel. The only gotcha is to transfer and link Azure subscription to CDX Entra ID and then detach after 90 days and transfer to the new CDX Entra ID More on reddit.com