I guess you either work for a company with highly sensitive data, or the IT people are overdramatizing a tad bit.

I also believe that IT security is important, but it should remain reasonable.

Sounds to me like more of a power play by management than a sensible security concept.