Opinions on running Full Microsoft E5 Security Stack

What's your opinion on this? I see many take this as an easy route out. Anything goes wrong, 'Microsoft' name protects both the security team and company. In a defense in depth design, what would you still keep separate from E5, P2, Defender, Purview and other MS stack? Any of their suggestions or recommendations for similar situations? submitted by /u/1egen1 <sp