The problem with Linux is manageability. We can't manage Linux as strictly as our security department wants. Well, we could, but it would mean mandating a certa

The problem with Linux is manageability. We can't manage Linux as strictly as our security department wants. Well, we could, but it would mean mandating a certain distro and highly customising this, removing root rights and tightly locking stuff down with SELinux etc. The developers have no interest in this and neither do I to manage it. Too many awkward edge cases. They can use Linux but they're banned from the network. And "Just install whatever you like and configure it however you want" will just not work if they want it on the network. I know, old-style traditional IT mentality but this is what we're stuck with. The word of digital security is the law here. I have to work within their rules. Apple has good MDM management APIs that can't be overridden even by admin users, good hardware and the devs are mostly happy with it. Locked-down Linux is worse than locked-down Mac. It's a tradeoff for all of us.