I had an argument with my boss where he was trying to stop people checking out source code to company laptops because they could be lost. My retort was that the company uploaded all it's company documents, spreadsheets, and other data to the cloud including employee personal data, and that was far for likely to experience a data breach. Those breaches would result in legal issues for the company, rather than a slight embarrassment.

He was apoplectic. How dare I question company policy.

At least in your case they didn't give the false hope. In my case two years ago company just stated that we "enrolling in ms ecosystem". That meant that to use your PC within company's domain, you had to authorize it with MS account or none of sites would work. Weirdly, MS does support that not only on windows, but also on linux and MacOS. And if MacOS is simple (and supported by our tech team), linux installation is awful — it requires ubuntu lts + to install ms antivirus, that will override some system filles on top of that and will have root access afaik. Well, I don't want company to control my personal device anyway, so I just installed win11 in qemu with tpm emulation and gpu passthrough and activated this "company account" shit there. Good luck spying on not activated bare w11 copy.

If job market wasn't fucked, probably would just leave instead tho.