At a prior company, this was the case. If you wanted to access a personal website, they had a fleet of repurposed Citrix servers running Windows Server 2012 tha

At a prior company, this was the case. If you wanted to access a personal website, they had a fleet of repurposed Citrix servers running Windows Server 2012 that had nothing but Internet Explorer, Chrome and Firefox for this purpose. The account you used was ephemeral and wiped after 4 hours of inactivity with the servers located in the company DMZ. You had full access (less the usual NSFW filters). You could not browse anything that was not whitelisted through your local computer and even then, it all passed through a proxy to make sure it was safe. You also couldn't use unapproved tools so you were limited to VS Code and PuTTY on Windows. Eventually they got smart and issued Macbook pros to programmers and implemented zero-trust policies for related internal services. Unfortunately, technical managers and product managers were not so lucky.