Who cares if they want to install xyz software [in their home directory]? Chances are it’ll be a free boost for performance and/or morale.

This /really/ depends on your threat model. “xyz software in their home directory” could easily be “exfil tool that uploads all data employee X has access too, disguised as a meme template generator”

no way. this kind of elitism and gatekeeping kills communities