I used to work in test automation for a huge company with terribly annoying IT. I can tell you for a fact that our entire department had well-developed workarounds for the most annoying policies. We even had a few intune 0-days that we literally kept to ourselves to be able to do our jobs properly.

Because in the end, it’s not IT on the line for their odious policies causing late delivery, it was us.

What was so annoying? Having to reboot for Windows updates/programs and MS Defender running?

Also, if the company is certified in some way there are audits for these things, you understand? Such as updates, backups, security, PAM, antivirus etc :)

Subvert these controls intentionally, especially security ones = bye bye. Logs don't lie. We see you.