Access to keystrokes and webcam are a large jump. If you're worried about malware there's a thing called an admin account that these employees don't get access too. Tracking is not equal to protection.