Comment by yencabulator

You're thinking security and that's a big part of it, but another part of this remote admin locked down UI demand is support & minimizing training cost. Everyone clicks the same icon in the same location to start the same business app and it starts up the same way for everyone. End users can't screw up their setup.

Long time ago I supported Linux&Windows desktops in an organization that chose to allow per-user customization, with the trade-off that if you ask for support, what support offers to do is reset your desktop (not data files) to default -- and that fixed practically all issues.