That's a reasonable take but then keep in mind we're talking about iTerm. How is the browser different from, say, `curl https://example.com | lynx`? Or `~/.bin/playwright/chrome`?

So while corporate restrictions sometime (but only sometime!) make sense, the configuration where a terminal is allowed while a browser is not - don't.