Most IT departments have the mindset of avoiding troubles instead of making things easy for users. They don't want to get blamed for security incidents. They want things to be predictable and within control.
They sacrifice a lot of user convenience doing that. On the other hand, IT giants are enshittificating IT services.