People being good at anything else (let's say, accounting) is not correlated with safe/smart computer use habits. If you can prevent a lot of turmoil by not letting them install arbitrary programs and still keep them happy and working well on their main role, why get rid of an otherwise good employee?