In a corporate environment they may not have that option

But they can run arbitrary VMs?

	▲	altcognito 3 days ago \| parent [-]
		Doesn't have to be arbitrary, and managing users requires a lot more nuance (endless permission toggling/configuring) than just running a VM that is more of a whitelist.