Yes, it is a bureaucratic pain for IT to request access to download a tool for testing, etc. and in many places that may be overkill.

Again, prior experience, we had brainstormed the idea of denying any executable downloads by frontline workers, while permitting it for IT, since frontline workers both were less likely to need to download random EXEs, and less likely to know how to spot phishing or grayware sites.