While available in preview, Build 22621.1194 fully implemented Smart App Control for Pro users. Unlike standard Defender, this uses an AI model to block unsigned or suspicious apps before they execute. It is aggressive—but for a production machine, it is the best "set it and forget it" security feature Microsoft has built.