&gt; I strongly disagree that there&#x27;s any privacy loss. Internal IT staff could look at your browser history and traffic if they really want to anyway<p>They could, but then they would be doing naughty things (possibly breaking the law).<p>Also the relationship in academia between scientists&#x2F;research groups and their host organization&#x27;s administrative staff is often very different than the relationship between the typical corporate drone in an enterprise and the IT department.<p>In this case we see that the staff is revolting because of just this issue.<p>Re the &quot;AV on all endpoints&quot; question, I referring to possibilities outside the typical enterprise IT swamp. Increasingly endpoints aren&#x27;t Windows PCs. Sometimes you don&#x27;t have any of those.