I think a lot of these things are less important by the day though. Are VPNs or advanced security software even necessary if everything is in Notion/Google Docs and something like Codespaces is being used?
End-device security is always important; there would be nothing to stop the compromise and lift of, for example, cookies stored in the browser, or a keylogger to grab passwords.