It amazes me what supposed SOC2 "compliant" companies are willing to skimp on. A recent employer of mine, also regulated kept fighting me on getting me a work laptop. Also another funded SF based startup.