Not giving him the computer - another ridiculous rule - would also help. So you example is a very poor defence of corporate ridiculousness I see some comments

Not giving him the computer - another ridiculous rule - would also help. So you example is a very poor defence of corporate ridiculousness I see some comments saying you can perfectly allow local installs of Spotify with the same security. What's your example that defends the original ridiculous policy vs this better one with less inconvenience to the users?