My corporate IT doesn't let us use ad blockers, password managers, incognito windows, or GPG. It's rules like that, which motivate me to carve my own path to actual security.

I've seen security breaches happen, and it's not the self-motivated users who cause them. It's the casual users who leave their computer unlocked, or go on social media with the same one browser they're using for work, or who click links in email without checking the source.