"The corporation also added that it would take around '100 staffing days to make the changes involved in switching to an independent clock'."

I'd like to see how they're going to implement that without relying on the user's time settings in some way.

Sure, they could get the system timezone offset, but that's not really any more safe than using the system clock.

GeoIP lookup? Surely location services won't fly because of the scary browser message.

Any other ideas?