They already do. Outside of tiny companies the norm is block all AI across the board if they have the IT staff that knows how. From what I've seen, large enterprise companies are still testing the waters outside of dev/IT use.