I refuse to use lab computers on this basis. I assume they're owned and have keyloggers. I'd sooner use someone else's toothbrush.
I don't understand why more labs don't use dumb terminals to hook back into a VM that gets blown out the airlock after each and every use.