Just btw, most assume when you say Cowork you're referring to Anthropic Cowork as it's the original rather than Microsoft's white labelled Cowork. And when you say Sol or whatever model you're referring to OpenAI and use on its servers. Microsoft's versions are not at parity with the originals. I feel your pain on being limited by silly enterprise restrictions.

On your point about "monitoring", personally I feel this is toxic corporate IT culture, enabled and perhaps pushed by the likes of Microsoft with all their tools, which they of course make money off. People have cellphones with cameras making most points in this area moot.

An alternative used in other big corporates is to set budgets, with tiered authorisation approvals for higher limits. The users and their managers can justify why and what they're doing that they need the additional tokens. This also encourages more efficient use of tokens on other work. More efficient use is sometimes counterintuitive. Laissez-faire generally works best.

Cowork requires user approvals for high risk actions such as emailing.