Except that no one involved really gives a shit. This is enterprise software bought by some manager to restrict access for the hoi-polloi in order to satisfy some HR rule. It's at least three levels removed from reality.

Not since false negatives are the biggest issue. For companies that use this software keeping porn and viruses off the network is a higher priority than letting charity donation pages through.

These companies have never little trust in their employees. A flip side of this is a lack of respect. Blocking none work related sites is an acceptable if not desirable result.