I think it depends on the situation.... it works better in situations where companies are smaller I think... one size doesn't fit all.

I've worked in both situations - as a contractor where I've used my own equipment, in all cases I've been extremely careful about client data, and have used encryption....

I've also worked for companies (banks) where no data can leave the site, internet access is extremely limited, machines are locked down etc. I think it's more situational depending on the company, data and employees.

Mark