Comment by dspillett

The dev desktops in the office are a controlled environment that can be locked down. We need that as we work in closely regulated industries handling potentially sensitive data.

At least until we arrange for everyone to have company provided dedicated work laptops which we can (mostly) lock down to the satisfaction of our clients and their auditors, but the switch to mostly remote working this year happened at roughly the same time as budgets were squeezed a bit (bet you can guess why!) so that hasn't happened across the board yet.

Allowing RDP from non-secured devices "for the time being" is iffy, but we are getting away with it due to the circumstances.