[bitlad]

There can be two reason why it is working.

- They might be running shadow IT

- Security and compliance is not their priority.

Since you have implemented BG and other controls. My follow up question is are these devs in that case EOR or contractors whose payroll is processed via you. Your org starts to look like deel, remote or midsource.

The whole PR assigning to junior devs feels gimmicky, no?

However, there are two problem statements you are solving. I agree with the first premise, remote junior devs will get better opportunities and confidence when they do this exercise. I think the second part of value generation, I think risk is too high for a closed source org.

[hzia]

We enable EOR + BR + MDM setup on the enterprise plan. Plus, MDM is usually gimmicky given most devs for these clients work in a virtual environment anyways (so the code never leaves their infrastructure).

IMO if we fail as a company, it will be far more likely because of inability to deliver high quality PRs instead of inability to get through compliance.