Some corporate IT security policies just don't make sense. Why is he allowed to install random software from homebrew but not signed apps from a developer who has a contractual relationship with Apple? Even the economics are broken - hackers are going to refine and commercialize security exploits against widely used apps like Slack because of its large and ubiquitous deployment. They are not likely to spend resources targeting power user Mac apps that change the appearance of the alt-tab menu.