Yes this can help for this especific type of extensions.
But about the whole document... 'm wondering if Endpoint is taking care of all recomendations.
It is something that is included in the "shadow" (like disable firewall) or we need to do manually all the exceptions included in the recomendation papers step by step.
Thanks