Allow me to sell your organisation some VR goggles with iris-reading DRM protection. Your browser won't display on any other screen. And Google Services won't work in any other browser.
It's not possible to do what Gmail wants to do without a SCIF.
https://en.wikipedia.org/wiki/Sensitive_Compartmented_Inform...
If not, consider that you might be making your own broadly wrong assumptions.