Give you a MacBook and a cloud Linux dev machine (or as many as you want). Secure access to dev environment with multiple easy factors - MBP biometrics, yubike

Give you a MacBook and a cloud Linux dev machine (or as many as you want). Secure access to dev environment with multiple easy factors - MBP biometrics, yubikey, etc Enforce strong password and FDE on the laptop. Obviously doesn’t need to be a MacBook, but you stated an aversion to overly locked down windows laptops. In general, just enforce strong multifactor creds when accessing internal resources. You can also enforce device very requirements, so a stole device or yubi can’t be used either. Then do what you want on your Linux instances in the cloud. They’re protected with their own controls.