All of the above.

I know one with Citrix where I can totally bypass the screen lock of the current user at any desktop. In about ten seconds, no skills required. This is how fucking lazy the commercial software vendors are lately. I guess it's intentional? Vibe programming? It's too blatant to be accidental...

We used Ivanti ( Pulse Secure ) for years along with Cisco for VPN/Web portal tasks. Ivanti had one zero day after another, but it was very popular with some executives so it was kept around. It had some advantages over cisco anyconnect and I preferred it until it was obvious that it was a bad product that we shouldn't use. And Anyconnect got better, some.

The security of Microsoft Bob®️