Just curious... did your employer agree to getting you a Lennucks Bocks 'cause you asked nice or were they frightened of running afoul of one of the many #a11y or security evaluation frameworks?
Security on a Mac, the same (SIP, Keychain, Secure Enclave, great tools for fleet management)
What specifically is in violation of "#a11y or security evaluation frameworks"?