Sure but the assumption being made by this policy is that it’s difficult to break the browser sandbox. This isn’t being implemented bec IT doesn’t like ppl runn

Sure but the assumption being made by this policy is that it’s difficult to break the browser sandbox. This isn’t being implemented bec IT doesn’t like ppl running random binaries. It’s to prevent malware from gaining access to the system. There are still many common hacks that rely on executing binaries that have been downloaded, as long as the infiltration point doesn’t also have elevated access these types of hacks are prevented.