Removing permanent admin rights is only the first step. JIT privilege elevation handles the rest through controlled, audited access requests.
The browser is the most used app in your workplace and one of the least governed. That imbalance has consequences worth taking seriously.
PAM was built to secure privileged access. Somewhere along the way, it became too complex to actually use. Here's an honest assessment of where things stand.