As an infosec person, I'm trying to get us disentangled from this mess. Lots of orgs install surveillance under the guise of security reqs, but let's be honest, they are doing it because they're afraid folks aren't working. IMO this stuff hurts the security team's mission.