I actually have worked in places where the company straight up took a screwdriver and physically broke every single usb port.

Also had to use a non-networked laptop where all the i/o ports were hot glued to keep whoever works on it from putting anything on it, since it was for a specific purpose.