At a former job, an employee had installed a porn "accountability" browser extension on their work machine. Helpdesk asked us in security whether that was ok. Of course it had access to all sites browsed, including internal sites. That was a big fat no.