Because anything unexpected that is deployed to a network will (not may) eventually become a security and/or support nightmare for someone. Better to keep users

Because anything unexpected that is deployed to a network will (not may) eventually become a security and/or support nightmare for someone. Better to keep users to a minimum set of features necessary to do their job. Yes, that sucks from a user perspective. But they don't have to fix the goddamn network at 3am because Al the Alcoholic in Accounting can't quit sending pix of his pickled junk to Betty in Brazil.