Right, but there are still access control settings in Plan9 that would be able to limit access if the administrator chose to do so, there is just more flexibility to what can be done by default.

I wouldn't be so sure. Allowing employees to move arbitrary hardware running arbitrary software into their VPN is a security risk many companies do not want to take.

That is why it took pressure to get iPhones into enterprise networks.

I just got into a mess where the company VPN uses a windows/mac specific client, no linux version and no way to access the VPN. So knowing how to set up VPN access 'on my own' is currently of no use to me.