My biggest complaint about Netwrix was the preference for domain admin usage. It’s bad practice in today’s world, I’ve wanted to undo it for years now. gMSA is not supported for all modules, though, and I’d rather not use it at all rather than have complication of still using it in some places.
I made post here about exchange hybrid, for example