The enterprise level security I've often noticed is around integration with SAML or LDAP. Both of those do take time and effort and I appreciate charging extra for it. As for RBAC, MFA, etc those should be made at a lower level like RBAC could be at a Teams level. MFA of course should be for everyone.