Tech companies, as a general rule, do not filter the internet of their employees, because those employees generally need to do a lot of stuff with the internet (or networking besides the internet) and filtering it would cause a lot of problems.

Production machines (where the data lives) can be much more restricted than work machines. Strong access controls mean that compromising a work machine doesn’t give you access to production data.