Cleanup Program Code

Bash and Zsh scripts are the Apple or *nix equivalent. Apple also has AppleScript and Automator options as well although I believe one of these latter two options may be deprecated these days although they both are still available. Also keep in mind that Apple tends to make major changes between different versions of macOS, so what may work today may not work with the next major version of macOS. Many Apple preferences/settings are stored in .plist preference files located in "~/Library/Preferences" folder. This Library folder within the home user folder is hidden by default in macOS. Like I said, Apple may change the layout of these .plist files with the next new OS. There are special command line utilities within macOS to configure various settings, but they can be hard to use as there is usually very little documentation.

FYI, Apple products are just made to be used exactly as Apple designs & ships them. Be careful trying to use the product in any other manner. Yes, you can use them in other ways & manage them in other ways, but you may find yourself doing a lot more work to maintain it that way. macOS has been moving towards an iOS like environment for years, so keep this in mind when managing macOS.

A company that spends hours setting up new Mac computers for employees may already have them under remote managed administration and that may interfere with any homegrown solutions. Best to check with their IT department.

Apple's macOS is a UNIX operating system and has nothing in common with Windows including the need for any anti-virus applications.

She needs to implement a mobile device management solution.

Deploy devices using Apple School Manager, Apple Business Manager, or Apple Business Essentials - Apple Support

twocanoes software offers solutions for this. Many large orgs use their products.