It’s about on par with these tools no? Running a closed source configurator that heavily alters the core OS isn’t really something I would expect a responsible IT team to do. Doubly so if you are in any sort of regulated industry.

They could still switch to using a Linux machine for most things (that don't belong to the employer), segregating the Windows machine off as much as possible and never letting Microsoft near any of their own data.