The problem from IT security point of view is what is "reasonable" and how it impacts internal systems if the laptop gets used as attack vector.