From a network operators perspective, endpoints can be compromised. How can I trust the endpoint will enforce all the security rules required to be attached to

From a network operators perspective, endpoints can be compromised. How can I trust the endpoint will enforce all the security rules required to be attached to the lan? How can I trust they won’t try send data to malicious hosts?