Ability to stop/terminate/quit applications and services
It should be possible to stop / terminate services and the complete application itself, both remotely and locally. Whether Windows updates will again cause unpredictable behavior, or specific software will not work properly due to endpoint protection, stopping services & applications should be made possible, e.g. by a temporary password for the user himself, as well as for the administrator via Sophos Central.
I rely here on a previous thread of mine: https://community.sophos.com/products/intercept/f/information/119138/how-to-quit-on-mac-os/