In our use case Passbolt is used for shared Company passwords. Seemingly these have are not used on mobile devices. Our company has an healthy work life balance and we don’t perform deployments, upgrades and maintenance outside office hours from our mobile devices.

Passwords for personal Company accounts, like Active Directory & passbolt private key, we store in our private password manager. These accounts get disabled when leaving the company.

What use cases do you have where you can’t use a laptop for company related activities?

I don't think you can dictate others' practices. They might as well want to deploy stuff from their mobiles.

Full of rootkits.