> I strongly disagree that there's any privacy loss. Internal IT staff could look at your browser history and traffic if they really want to anyway
They could, but then they would be doing naughty things (possibly breaking the law).
Also the relationship in academia between scientists/research groups and their host organization's administrative staff is often very different than the relationship between the typical corporate drone in an enterprise and the IT department.
In this case we see that the staff is revolting because of just this issue.
Re the "AV on all endpoints" question, I referring to possibilities outside the typical enterprise IT swamp. Increasingly endpoints aren't Windows PCs. Sometimes you don't have any of those.
They could, but then they would be doing naughty things (possibly breaking the law).
Also the relationship in academia between scientists/research groups and their host organization's administrative staff is often very different than the relationship between the typical corporate drone in an enterprise and the IT department.
In this case we see that the staff is revolting because of just this issue.
Re the "AV on all endpoints" question, I referring to possibilities outside the typical enterprise IT swamp. Increasingly endpoints aren't Windows PCs. Sometimes you don't have any of those.