Also if you can’t figure out how to get around the Chrome extension restriction, you either have remarkably competent CPEs (not me, so unlikely), or you’re not trying hard enough. Go download Canary to start.
Depends on the OS and the “MDM rules.” For instance, it resides in a separate preference domain identifier on macOS. Your sysadmin must deploy “MDM rules” - a profile - which applies to Canary specifically.
They often don’t. Moreover some of the most common implementations of Apple’s MDM protocol also don’t do so automatically.
If they have remembered Canary, just compile your own Chromium with an amusing identifier.