I use nmap routinely at work to see what’s on a subnet, has anything new appeared, or where it should not be.

+1. If I can't run nap or netcat, or have to justify it each time, I can't do my job. Better off elsewhere.

I've departed early at least twice over this. Draconian IT serves nobody. Been doing this long enough I deliberately poke any new employer; see what's in store.

Nobody cares, though. EDR appliances sell without careful administration. The industry will outlive us all.