[raxxorraxor]

> They ban all non-Chrome browsers from being installed.

There are portable apps for other browsers, Firefox for example. FF has its own certificate store that overwhelms IT.

about:config -> security.enterprise_roots.enabled and it uses the system store.

Overall Firefox is a very good browser to configure for different machines. The out of the box Chrome or Edge are just a bit more forgiving to MITM attacks. So the user doesn't notice perhaps? Aside from that they are horrible browsers with horrible priorities.