@StripeyYena They've moved on to either fully managing our devices (which does not work for scientific computing at all) or asking us to take personal responsibilty, including full liability in case of any network breach.
So.. it's just personal suicide to operate your own computer now, as a single unpatched zero-day vulnerability encrypting another production computer means I'll be held accountable for damages.
We're still doing it, naturally.