The company I work for "had to" enforce usage of an agent tool that monitors if the computer is fully up to date on everything it is running - in order to get some sort of security clearance that sales team can then brag about to potential customers.
Said tool focused mainly on the most common OSs and is slower to update its data about others, like Fedora which I was using. So the company forbid me from using Fedora for work. I had to setup a machine with Mint, which doesn't update nearly as often as Fedora does.
Then turned out the agent tool also had a bug that causes a GUI tool to launch itself once every minute just to let me know that it will run updates if there's any. To stop that I had to disable the update manager from running on its own. Which I later found out caused the system to never update anything ever again.
The tool also never detected anything being outdated, even while I was running a 5-month-old browser version.
So in short: completely giving up on security in exchange for looking secure.