Thats a very spicy threat model post the age of IoT.

Any stray device you may not even be aware of can rip that assurance apart.

A fully locked down network can in theory enable this however, very few enterprises actually are strict enough for this to be enforced across the whole network.