Well if it works and you are happy with it don’t change unless you have a good reason. The only thing that others might have mentioned is that depending on your m365 license you might already be paying for defender. More on reddit.com

I have been working with the Defender suite since 2020 and Microsoft have put a lot of effort to make it one of the best XDR solutions out there with continuous improvements. I have not used other XDR solutions so I cannot compare it against other products. My only advise would be avoiding all these YouTube videos where they run multiple ransomware files against Defender, as neither the devices used in the test nor Defender have been hardened properly. More on reddit.com

Analytics rules (Sentinel) use Sentinel tables (in the associated Log Analytics workspace). Custom Detections work only in XDR (aka Defender Portal) on the Advanced Hunting tables. In your scenario, if you want to use the Device* tables in an Analytics rule, you must ingest them. They only appear to be present together in Advanced Hunting because of the Unified SOC integration. That only works for ad-hoc queries. More on reddit.com

https://learn.microsoft.com/en-us/defender-office-365/mdo-portal-permissions#create-email--collaboration-role-groups-in-the-microsoft-defender-portal You need to be assigned permissions before you can do the procedures in this article. Admins can take the required action on email messages, but the Search and Purge role is required to get those actions approved. To assign the Search and Purge role, you have the following options: Microsoft Defender XDR Unified role based access control (RBAC) (If Email & collaboration > Defender for Office 365 permissions is  Active. Affects the Defender portal only, not PowerShell): Security operations/Security data/Email & collaboration advanced actions (manage). Email & collaboration permissions in the Microsoft Defender portal : Membership in the Organization Management or Data Investigator role groups. Or, you can create a new role group with the Search and Purge role assigned, and add the users to the custom role group. More on reddit.com