It's also a security risk. They may generally trust you, but may not trust you 100% in the little detail of never ever getting malware on your laptop, which then would invade their internal network. I'm actually astonished that so many companies allow you having a laptop that you take home and that also connects to the company network.
Being “in the network” doesn’t matter anymore because everything has moved from unsecured intranet services to Internet exposed stuff authenticated with SAML. One user having malware is as much of a threat as someone else at the cafe having malware. No longer an issue.
Admin access is fine, you only need to block the USB ports and secure your network and domain policies heavily enough. The alternative to desktop PCs are VMs in the company's data center accessed either remotely or from local thin clients via remote desktop.
I can't imagine how unproductive people would be working under all these restrictions. You walk in to the meeting room but can't plug your laptop in to the TV because it's using a usb c cable. Can't visit the websites you need to get your job done because they might contain software you can install on them. Have to wait for IT to approve everything and just sit around being unproductive.
Just so the company can continue to have insecure internal services.
Actually most of the time with companies that still self-host I see take home laptops with VPN since work-from-home is a must. So not only does the risk still exist, the malware doesn't even have to wait for you to go back into the office.
