For sake of discussion: aren't there uses of this that aren't nefarious?
Their claim that employees intending to leave "may put the organization at risk of malicious or inadvertent data exfiltration upon departure" is, cynically, corporate bs; but data theft or vandalism isn't entirely unheard of by departing employees.
Ever moved your source code to a thumb driver before you left your job, even though your contract technically forbids it, you've signed away the IP rights, etc?
Their claim that employees intending to leave "may put the organization at risk of malicious or inadvertent data exfiltration upon departure" is, cynically, corporate bs; but data theft or vandalism isn't entirely unheard of by departing employees.
Ever moved your source code to a thumb driver before you left your job, even though your contract technically forbids it, you've signed away the IP rights, etc?