[lrvick]

I have worked at 10+ fintech companies in a mix of full time and contract roles and exclusively use QubesOS. No one was able to make a coherent argument how MDM was going to work or help improve the security of a base OS that is not even connected to the internet.

At best I could run something like osquery that sends reports to my sys-net VM that forwards them to to an interested IT group at a set interval, but no one has actually implemented this as I am always enough of an edge case that they can file a special exception for me.

Some fintech orgs do get by with Linux users just using osquery reporting to a central monitoring panel like Kibana or Kolide that can send automated alerts to those not complying.