Meta security also allows any software to be installed. But they also keep a track of laptop state through the osquery daemon that's always running.

GP was talking like this alone was gross negligence, implying that this is different from the rest of the industry. That doesn't seem to be the case.