I used to work at a company with very intense security restrictions. Layers of passwords and 2 factor auth to do anything, secured company laptop needed to access even email, etc etc.

But they still didn't restrict chrome extensions, which seemed odd to me.