> reduce the surface area by which an employee can extract data from the facility
Is that what they must do? A software engineer at a FAANG could exfiltrate 1000x more data with their skills and their privileged access. I think they should be treated like call center employees.