I've heard in the past that Azure Virtual Desktop has benefits in an environment and makes it easier to keep up with the NIST and CMMC controls, but I have yet to find any reasoning for that. Anyone have any insight into how using AVD could have better security than issuing laptops that are controlled by Intune and GPO's?