

If the data is sensitive just give them a cheap whatever machine and have them connect to a vdi. That way the data never leaves your estate and means you don’t have to worry as much about the device being lost/stolen. If this isn’t an option I’d strongly recommend looking into an MDM solution for your devices.
The main thing I’m learning from this thread is that a surprising number of people don’t shut their machines down when they’re done using them. Which is wild to me.