/> Maybe they should just give their employees two computers, one air-gapped for accessing internal systems

And why do you think that may not already be the case? Even other big tech companies already give out two computers.