OTOH, in the "walled garden" analogy, it's kind of implicit that the provider is dictating the lion's share of the experience for the user without their input (and sometimes, in direct opposition to it).
Here's the thing, most users want the freedom to install and run apps they want to run and surf the web where they want to surf. iThing gives them that just fine for most people. There are more successful "there's an app for that" instances than there are "Apple won't allow that App so I can't do it" situations for most users.
An IT division should be responsive to the needs of management, doing them the service of providing the customized experience. Of course, if you're not in a position where your inpute has any weight, it can seem like six or half-dozen.
What tends to happen with IT is they become autonomous from the company and exert greater control and restriction over the desktop than what even managers want, all while citing security, best practices and so on.