Yeah. If that’s not one of the first things IT did when they got hired, then you need a new IT. You seriously can’t trust anyone to not plug a random USB into volatile infostructure.

Also, they could do it to prevent theft of their proprietary code and other things that you’d probably need to sign a NDA to even see in the first place.