Unless the browser locks down devtools you can't you always run userscripts to some extent?

One way to solve it is to partner with the enterprise directly and work within their guardrails

Shameless plug: my company does it, live with Series B companies.

got our extension approved, post which we had no issues.