The answer to that is best summed up by the video at the top of this page, but decryption (why is that important and a good thing? see the videos here) and more authentication, reporting and filtering by user group (this time Chromebook authentication being added to the Windows Active Directory synch) is just the beginning. Next year we will add more user auth opportunities. better audit logs and much more.
The infrastructure refresh is particularly important - you won't notice that, but it means we have the latest technology, futureproof protections and the ability to add the functionality you need. Much of this was already planned but its importance has been highlighted by the new standards and emphasis on a safeguarding-first approach (such as the DSL now having lead responsibility for filtering).