[oogali]

I worked at a firm who had the same policy in 2014.

It was more common than you may have realized.

[Mandatum]

Honestly, most boutique, government-involved security consulting firms have similar requirements. Given how much of tech is outsourced these days, obscurity is often the only line of defense some organisations have.