Doesn't match to my experience - its either open slather or properly restricted VDI/Citrix envs.