Matthew in accounting should be given an ipad pro instead of a laptop or pc, with a glued in lightning cable that can only do power.
^ This is the solution I have been mulling if and when I am responsible for an org where security is kinda important. Sure, iOS is still hackable, but hopefully we put more hindrance steps between the attacker and the org, and move the exposure more to the cloud services (like box). Curious if this is feasible.
Why is that a mark of a shit company exactly? Because we should continue allowing a threat model that continues to plague essential services like hospitals with "ransomware", the fact that such a threat is allowed to continue suggests we need to take a hard look at how much we should take highly customisable computers for granted in work situations.
A magnetic lightning connector glued in should do fine[0], but if your threat model really takes into account checkm8, you could also just buy the newest ipad which will have a patched SecureROM.
^ This is the solution I have been mulling if and when I am responsible for an org where security is kinda important. Sure, iOS is still hackable, but hopefully we put more hindrance steps between the attacker and the org, and move the exposure more to the cloud services (like box). Curious if this is feasible.