> But the problem began decades ago when sysadmins started using firewalls to control what employees could access.

If the sysadmins were told "We don't want people doing X on company time: stop it.", that is hardly the sysadmins' fault.

Do you think IT / Helpdesk wants the drama of extra calls because certain things are blocked? That they're sitting in their cubicles twirling their sinister mustaches thinking of ways to make people's lives more difficult?