People in my company sounded underwhelmed by it. It usually was founding issues by not understanding deployment (or not being fed that info).
No personal experience with it. But the security team writeups I’ve read are significantly more positive about it than you describe, so it might be worth a second look.
You used to have a couple of days to close a breach, now it 2 hours.