Matthew in accounting should be given an ipad pro instead of a laptop or pc, with a glued in lightning cable that can only do power.

^ This is the solution I have been mulling if and when I am responsible for an org where security is kinda important. Sure, iOS is still hackable, but hopefully we put more hindrance steps between the attacker and the org, and move the exposure more to the cloud services (like box). Curious if this is feasible.