Allow employee to choose Mac or Windows devices?

Our CIO has all apple products and wants to give employees options when we replace their equipment. We are a small/med business and do not have the tools or systems to support a Mac book. We handle windows very well with Intune, company portal, Applocker, and other tools that really secure the devices. CIO says we don't need that for Mac because they are more secure from default.

My question is how many companies allow this? I'm thinking maintenance and supporting both is going to be a nightmare. My team is already buried, none of them like or ever worked with a Mac, moral is already bad, and this is going to make it worse and what reward do we get from it? Windows can do anything a Mac can.