I guess I just wonder, why give any extra trust to a device just because it’s in your company network? Why not have specific authorizations for specific operati

I guess I just wonder, why give any extra trust to a device just because it’s in your company network? Why not have specific authorizations for specific operations? A device on your company network could be pwned by anyone.