> Linux doesn't have a way for employers to do that to my knowledge.

There are plenty. It may involve having passwords on the BIOS in order to be
user-restrictive, but generally if they control the network over which your
desktop is connected, they can have you do anything you need without superuser
access.

Been doing it for 19.65 years now, successfully.