@[email protected] it is concerning, and in this context, of course you'd want it to be force-disabled centrally
Still, if I understand well how Microsoft implemented it, she should still be able to at least disable it through the normal system settings window, on her machine, without any intervention from them.