Balancing Productivity and Security with Admin Privileges

What's your thoughts on a CISO's decision to give all users admin privileges on their workstations?
But other hand having security controls in place like EDR, DLP, Device management, MFA, conditional access, etc...

access admin admin privileges ciso conditional access controls cybersecurity decision device device management dlp edr etc management mfa privileges productivity security security controls thoughts workstations