We are concerned about the possibility of mass isolation affecting all 700 endpoints, especially since many are segmented. It would be beneficial to have a feature that prevents mass isolation of the entire organization while still allowing alerts to isolate specific endpoints. This would help us manage security incidents more effectively without disrupting the entire network.