Create recommended Microsoft Intune policies

[ghost]

Feature Request

Is your feature request related to a problem?
As an administrator it would be helpful to have a mechanism to create recommended policies, so I can ensure that my tenant has a better security posture

Describe the solution you would like
Ideally there would be a cmdlet that would create policies with the recommended settings

New-SecMgmtIntuneRecommendedPolicies [-TenantId <identifier>]

Describe alternatives you have considered
It is possible to create compliance and configuration policies using .NET or the Intune PowerShell module. However, the recommended policies are not well defined which means that I have to develop code similar to the following

DeviceConfiguration endpointPolicy = await client.DeviceManagement.DeviceConfigurations.Request().AddAsync(new Windows10EndpointProtectionConfiguration
{
    BitLockerEncryptDevice = true,
    DefenderEmailContentExecutionType = DefenderAttackSurfaceType.AuditMode,
    DefenderGuardMyFoldersType = FolderProtectionType.AuditMode,
    DefenderNetworkProtectionType = DefenderProtectionType.AuditMode,
    DefenderOfficeAppsLaunchChildProcessType = DefenderAttackSurfaceType.AuditMode,
    DefenderOfficeAppsExecutableContentCreationOrLaunchType = DefenderAttackSurfaceType.AuditMode,
    DefenderScriptDownloadedPayloadExecutionType = DefenderAttackSurfaceType.AuditMode,
    DisplayName = "Windows 10 - Endpoint protection policy"
}).ConfigureAwait(false);

DeviceConfiguration generalPoliy = await client.DeviceManagement.DeviceConfigurations.Request().AddAsync(new Windows10GeneralConfiguration
{
    DefenderPromptForSampleSubmission = DefenderPromptForSampleSubmission.PromptBeforeSendingPersonalData,
    DefenderRequireCloudProtection = true,
    DefenderRequireRealTimeMonitoring = true,
    DisplayName = "Windows 10 - General configuration policy",
    EdgeRequireSmartScreen = true,
    PasswordMinutesOfInactivityBeforeScreenTimeout = 5
}).ConfigureAwait(false);