Modern cyberthreats are genuinely terrifying to consider. It might seem best to lock down your network to the point where someone would need an authentication code to open every window.
Here is the problem: If you make your security framework so restrictive that your employees feel like they are being micromanaged by an algorithm, two things happen. First, their productivity plummets. Second, they will actively look for ways to bypass your security just to do their jobs.