There are already some controls in place available, but they are often platform-specific (GPOs on Windows, Configuration Profiles on macOS) than can be pushed through Active Directory, Intune, Ivanti, etc, but this does remove some friction and configuration gaps where you can centrally manage those policies in a single location.

You'll still likely need to push something like an enrollment token for Chrome (ex: https://support.google.com/chrome/a/answer/9301891 ), but then the rest is done through the Firefox Enterprise console.