Our developers mainly use MacOS. However, there are a few that would like to run linux. We have certain policies in our organization that describe the requirements that need to be met inorder to use in this case operating systems.
A big one is making sure that de disks are encrypted and the encryption key is stored.
It would be nice to see this implemented in a similar way to windows/MacOS with their bitlocker/filevault policies.