Add information for controlling Managed Login Items for macOS Ventura -- it's described as needed in the Ventura compatibility article, but not mentioned in the article that's linked from that:
Sophos Endpoint Protection agent can be turned off through System Settings
In macOS Ventura, users with Administrator credentials can turn off Sophos Protection Agent through System Settings > General > Login Items.
This setting can be controlled by deploying an MDM profile. See Installing Endpoint Protection on Macs for more information.
How do we set up the MDM profile for apple.servicemanagement to bypass the managed login items notifications?