Comment by psd1

If your company has windows and Linux but only guards against threats on windows, then you may have a different problem.

I believe you can lock a Linux box down tighter than a windows box, but then you're trading compile times for other costs.