Apricot would be a more complete solution if it included SharePoint sites that are not connected to M365 groups, such as Communication sites. Most of the time these sites still need to be governed with the same or very similar policies as sites that are connected to a group.