It looks like you are focussing on business secrets and, while important, at least for me my main concern would be personal secrets on personal hardware that I

It looks like you are focussing on business secrets and, while important, at least for me my main concern would be personal secrets on personal hardware that I am also doing side projects on. A business today can reduce the blast radius by quite a lot with separate laptops ("customer/project laptop"), sample data and restricted/time limited access to production data. In an ideal world no npm dependency could affect my online banking, icloud photo library or private messengers.