The "expensive" but quick to implement citrix workspace. It even has the ability to run a Linux environment. The hardware to run this software is quite expensive, as well as a learning curve on the management of citrix workspace software.

The cheaper KVM on Linux route. You still need robust hardware. As long as you don't need a 3D graphicly accelerated environment, it should work fine for remote work.

For both instances disable USB mass storage device connections. They could still cut and past steal the code, but it would be quite a pain to do so.

Systemd to replace everything. Maybe thats rude. Maybe systemd is to unite everything that is disparate in Linux. Lennart's project will correct all that causes angst in the Linux world. Of course that means gathering other major important projects under or shall I say "into" his. Maybe... eventually... the kernel?