> The problem seems to be that tech companies approve EDRs without much checking.

This is essentially what happened to dark.fail:

https://www.vice.com/en/article/qj8833/dark-fail-fake-court-...