A real issue we have run into is that "computer use" features, which is absolutely a big no-no at our company, can be enabled with a single click, and we cannot configure that.