Lot of places just lock down USB to read only. Exceptions could be made for specific machines and device IDs.

It's pretty common really - and if the internal disk is fully encrypted reasonably hard to easily exfiltrate a large amount of data.

Of course that doesn't stop taking screenshots with another device but that's a slow process