My corporate IT doesn't let us use ad blockers, password managers, incognito windows, or GPG. It's rules like that, which motivate me to carve my own path to actual security.

I've seen security breaches happen, and it's not the self-motivated users who cause them. It's the casual users who leave their computer unlocked, or go on social media with the same one browser they're using for work, or who click links in email without checking the source.

I’m gonna guess that 99% of the time a company gets hacked because the CFO gets caught downloading porn from a sketchy website on his Windows machine. Not because of some nerds running linux.

It often takes my company three months to allow certain security updates through, so I'd say that's a fairly huge fail from a security standpoint. It is quicker from the Mac team though, and they're slowly deprecating Windows machines once it's certain all software works properly on M* machines.

Shitty corporate IT security - yes.

A proper corporate security is to never have a chance for some client device to compromise the security.