This is likely the target for the product. Still, at a relatively small number of seats, maybe 200? an IT service administrating Chrome through the Google Apps service you're likely already paying for becomes more economical.
Keeping public internet work separate from local webapps would certainly help to avoid a fair number of vulnerability classes (as public browsing would take place in a totally separate environment without filesystem access or access to local resources, without access to local credentials, cookies, or network resources).