@andrewt @rrogers I wonder if it's an inappropriate carryover from internal processes. Requesting control makes much more sense when it's the org's device anyway, especially as IT often have more access to the system than the user does.

(I think it's still overused in that context though, creating unnecessary risk of data breaches and the like.)