Your AI Policy Assumes the Work Is Happening on a Laptop You Own Cybersecurity Insiders