Very far down the list considering most companies employ remote management software that can immediately lock and wipe a machine.

Not to mention the legal ramifications. If your company IP is so critical that the legal consequences are not enough, you probably have other controls in place and it isn’t just sitting on an employee’s laptop.

You will not like the answer, but it's the face to face trust and relationship you build with them over time. I know, I know, it's not a perfect logical answer, but it's been working like this well enough for longer than 100% remote options were so common. I am not saying I am right and I am not saying remote is bad, I am just saying this isn't a black and white topic yet, maybe one it will be, right now we should be OK to say "ok it might be good in some cases, but not all cases".