This is off by default afaik - it can be whitelisted via group policy in an organization (like already today). Windows environments can be managed pretty well

This is off by default afaik - it can be whitelisted via group policy in an organization (like already today). Windows environments can be managed pretty well centrally via group policies- it's actually one of the reasons Active Directory is the defacto standard.