Hi,
I would find that SEP should include features that govern the web access and prevent harmful website access.
It is rather hard to explain to user when it get infected from a harmful website, and the website obviously harmful and the endpoint solution cannot stop it.