This is 100% correct, my comment was referring to non-domain joined PCs with no policies set.