Is it not common for companies to control what apps are installed on corporate computers, and where company data is stored (cloud providers, etc)? I get the who

Is it not common for companies to control what apps are installed on corporate computers, and where company data is stored (cloud providers, etc)? I get the whole Zoom backlash, but this is taking a specific instance of company and app and harvesting clicks.