I actually didn’t know that elevation with UAC is a thing in (Windows) enterprise, and am still unsure what attack vector it protects against.

There are some paranoid environments, and some feel there is a lot to be paranoid about.

But I do see that it seems to make sense to people more knowledgable than me now.

I'm not claiming to know everything or to be more knowledgeable. I'm only hoping to persuade you that sudo has benefits, and should be configured for your needs and policies.

Thanks for the great interaction, by the way.

I'm glad we can interact peacefully. I hope you have a great day or night!