Yes I understand it's not "my" machine, but it's the dedicated machine my system runs on.
That someone would let an agent run on it at any time, read what's there, and possibly modify the code or stop a process, without even informing me, is what I find problematic, to say the least.
You don't have intrusion detection / auditing setup?
What good would such a thing do when the anointed gatekeepers (ie IT) have explicitly granted access to the transgressors? The scenario you're responding to here amounts to corporate slapstick.