Nothing, in theory. There is a lot of clerical office work, or fixed flow work (like CNC machining) that doesn't need new programs. But there is also a fair amo

Nothing, in theory. There is a lot of clerical office work, or fixed flow work (like CNC machining) that doesn't need new programs. But there is also a fair amount of IT work that is hampered enough by whitelisting that IT is the one that does not want to do the whitelisting. Some of this can be blamed on Windows IT admins finding it normal to download random binaries and run them for diagnostic information or configuration management, but that is not an easy problem to solve.