That is so wrong that it’s actually impressive.

Either you’ve never worked in this space, or because it wasn’t present in the few IT departments you’ve worked in, you extrapolated that to mean it wasn’t present in any large organization.

By all means, I don’t disagree that American firms should not be using Kaspersky, just as Russian firms should not be using Sophos (UK based), but to pretend that they aren’t one of the oldest and most well-established brands in the space is misinformed at best.

I think you confused the fact they have a retail product presence, to mean that they don’t have serious enterprise solutions, but they do: NDR, XDR, agentless for hypervisors, etc.