My significant concern would remain in this configuration that if anyone in your organization views or enters sensitive or personal information into non-intrane

My significant concern would remain in this configuration that if anyone in your organization views or enters sensitive or personal information into non-intranet pages, that that information would still be subject to easy compromise. What about internal services or tools hosted by cloud providers? Bear in mind, a malicious cloud-to-butt Chrome extension could even replace the download URLs on trusted websites to download content from malicious sites when you click them.