[altcognito]

In a corporate environment they may not have that option

[SoftTalker]

But they can run arbitrary VMs?

[altcognito]

Doesn't have to be arbitrary, and managing users requires a lot more nuance (endless permission toggling/configuring) than just running a VM that is more of a whitelist.