Especially at Google scale, where the BeyondCorp system described in their papers could automatically see when an endpoint was doing something naughty, block the user from accessing corporate resources, and give the user information on how to fix it, instead of blocking them from installing anything (even if what they want is perfectly harmless).
There's also that zoom free tier creating a 'Shadow IT' situation. Slack used this to great effect and everybody on HN was very impressed. It should be no surprise that Zoom is finding its way onto random employee laptops, that is something tech firms are trying to do on purpose now.
I have no idea how I know this. ;)