I could have written this verbatim comment, but you saved me the effort. We have "2FA" which becomes 3+FA on the most random stuff at work. So whatever you have

I could have written this verbatim comment, but you saved me the effort. We have "2FA" which becomes 3+FA on the most random stuff at work. So whatever you have to do for the day will contain lots of sprinkled arbitrary 2FA games. Sometimes you can check a box "cache this for a while", other times it's grayed out. Meanwhile, the actual applications we keep running are full of unpatched security holes, for .. reasons. So it is all theater, but my boss and bosses' boss (6 layers last I counted) gets to claim in some review that we are "encryption at rest" etc., so "all is well". My development machine is unable to build executable files, because crowdstrike flags them as suddenly appeared malware. I have got a crowdstrike security exception for a single folder, where I can place my executables.. We have trouble interacting with web services, because the company web filter classifies web api URLs as "newly appeared/unknown website". Our stratosphere one-way-communication management layer are clueless about these issues, as someone have explained to them we "just need to do git push CI/CD to the cloud".. News flash, 80% of our software is NOT cloud or web based.. I "manage" some of these issues, by unplugging the ethernet cable and instead work off wireless HotSpot from my company-provided smartphone, but I am well aware that if the clueless management ever figures any of that out, it is no doubt firing offence :-/. But then again, a new job would be a breath of fresh air, I am unfortunately just paid too well for a cozy, if mindless, job.