The more interesting problem is what the machine holds. Every person who has ever logged into a system from that computer and clicked “remember me” has left a credential sitting in the browser.
The number one cause of mystery software is the installer you didn’t read all the way through.
Data breach notification laws do not distinguish between a hacker accessing your systems remotely and a person physically walking out with a device that holds the same data.
Picture this: it’s ten minutes before a client call and someone on your team realizes they need Zoom. They type "Zoom download" into Google, click the top result, and follow the prompts. The page looks right, the installer runs cleanly, and Zoom open