My company's security dept briefly (briefly!) put GCC on the banned software list. Yes, that GCC. Buncha big brainlords in that dept.
I've been doing consultancy for OSS development and one in-between company asked me to sign a contract that had a random clause in it somewhere that banned the use of OSS for work.
When I pointed this out, they said "just ignore that part".
Nope LMAO!
How did that work out for them?