[idkyall]

Yeah, you'd think if he had a legitimate need for USB storage then work would issue it to him right? And then in that case, if he was using a work USB storage device with his personal computer for personal data storage, then that's an issue in its own right, regardless of what the data is, but it seems it would be more straightforward to just say that.

[freedomben]

You would think that, but it's rarely true. Getting issued a $10 USB drive could take a ton of paperwork and red tape, and eventually end with a "yeah that use case seems inconvenient but not worth us doing stuff". When you have one sitting on your desk or in your pocket already, that's a tempting one

[idkyall]

Honestly in my experience every company I've worked at has had some kind of explicit cybersecurity policy or training telling us not to use USB drives, so from a CYA perspective I think I'd be very hesitant to plug one in to a work laptop at all. But I have only worked at massive corporations, so my experience is limited