Even the companies with the strongest RTO policies still allow many employees to work from home one day a week / if they are sick / if they are on call / in other extenuating circumstances. So those IT departments still have to manage a fleet of off-premises devices of approximately the same size.
Maybe there are small savings from underprovisioning VPNs, or fewer support requests when people will all be in the office regularly, but that seems tiny in comparison.
The issue isn't a laptop going home once a week, it's never being on the LAN at all after they are imaged. It has nothing to do with "VPN provisioning" or whatever you mean by that. The problem is that all the policies and tools implemented expected the devices to be on the LAN at least occasionally.
Even the companies with the strongest RTO policies still allow many employees to work from home one day a week / if they are sick / if they are on call / in other extenuating circumstances. So those IT departments still have to manage a fleet of off-premises devices of approximately the same size.
Maybe there are small savings from underprovisioning VPNs, or fewer support requests when people will all be in the office regularly, but that seems tiny in comparison.