I worked for a government contractor and this was common guidance over a decade ago if you are in any sensitive role It is not hard to imagine a scenario where

I worked for a government contractor and this was common guidance over a decade ago if you are in any sensitive role It is not hard to imagine a scenario where a foreign government might surreptitiously plant a rootkit on a lowly IT workers device as they transit customs, as a means to pivot for corporate or other espionage It is much more common to phish the administrative staff for a firm to get network access but you would have to be a fool to ignore the vector of customs simply using direct physical access for a much more effective hack