Also working in a finance role and it is exactly that. They don't want to give us access to any fun tools.

Things that are common on dev machines like a working copy of python...nope. Admin...nope. Even RPA tools that automate clicking on things are no bueno because they could be used to bulk extract data from intraweb sites

Great deal of access...but it's calibrated towards low bandwidth human uses. Which indirectly prevents bulk data exfil