Chrome is a disallowed program on our network by "Symantec Endpoint Protection". You can install Firefox but it's discouraged by the IT department. I wouldn't doubt if these setups are common among larger corporations.
That's what it's like here. Fortunately, you can just rename chrome.exe to not-chrome.exe, then everything works fine. The "protection" software works just well enough to get the contract, but not so well that you can't work around it.
I suppose the issue was more that there are barriers which require the effort beyond that which the 98th percentile will exert for the benefit that Chrome gives, and therefore 98% of users will stick with what's given to them.