You know this might be the final push that the long needed IT-overhaul happens: every employee now needs 2 computers.

One super locked down white list only apps and network connections required to get their work data. email links completely blocked, email files can only be sent to a sandbox

One with immutable sandbox tasks: internet browsing, AI processing (super locked down human chosen only data in, and only outgoing connections are to foundational model, or back to the secure system for long-term-storage/backup)

(basically qubesOS, or more likely cant if microsoft needs its own secure boot and tpm hardware)