I actually agree with you, and I feel terrible about it in every case (it sucks being forced to treat aggrieved colleagues as adversaries), but we've gotten shi

I actually agree with you, and I feel terrible about it in every case (it sucks being forced to treat aggrieved colleagues as adversaries), but we've gotten shit from clients over the poor data stewardship on this issue. It's not just the employee's vacation photos and recipes on the device. There are other factors too-- one new challenge terminations in a WFH world present is that after HR notifies them, the employee can simply not log out and still have access to the local filesystem...and external media. Or if they slammed the lid shut in anger, they'd later log back in to Windows using cached credentials in Airplane Mode. So employees were regaining access and exfiltrating data indiscriminately. It's been much less of a clusterfuck if we just reset the FDE key once HR is done with them, then negotiate return of specific files they identify. (Sometimes we do let them keep the laptop too, after recovering their stuff and wiping the rest.)