He's in the IC (and so is the other guy who recommended it), so less "sysadmin best practices" and more "stopping state actors" practices, so maybe that has something to do with it. I'll tell him the Internet thinks he's wrong and see what he says. He definitely wasn't saying it was great at the time, just that it was needed in addition to Defender and was way safer than Kaspersky which is basically spyware.