Then you come crying to us when things aren't updated or servers get breached. Also, for DNS/Website blocks it is often management that decides but a baseline of malware/p0rn blocking is good. Besides, account in general are not admin any more in the enterprise. Just how it is :)
Cyberinsurance is a bigger and bigger deal now.