On a personal note, the advice not to browsedown from less trusted devices often means an organisation supplying a trusted device. That potentially conflicts w

On a personal note, the advice not to browsedown from less trusted devices often means an organisation supplying a trusted device. That potentially conflicts with IR35 for contractors who would then not be supplying their own equipment. I've also seen it result in a contractors *nix laptop being swapped out for a Windows laptop (built by a junior employee) with mandated "phone home" software installed. Personal biases persuade me that this wasn't necessarily an improvement in the security of the system. I should say, I'm generally a fan of NCSC advice and I think it's great they're putting their thoughts out there.