The possible future senario is due to panic about Apple dropping support for Binding MacOS to a Windows Domains, my department implement 'Managed Desktops' with a limited number of applications approved for use on desktop computers across the whole organisation.
Then the way to install the essential tools for the scientists I support would then be to install them under the user ~/Applications folder (Some java applications like imageJ actually require this, it's not great for security but some computers are still used by their user to compute things) or by installing commandline applications into a user ~/bin folder.
It's a very specific problem and it doesn't surprise me that it hasn't been considered I just thought I would check that it hasn't already been done due to another set of requirments I had never thought of.