security theatre: enforcing a proxy which blocks access to Google Drive but not Google Mail or any other ways you could get data out
$ork's security policy blocks USB mass storage and MTP devices, but nothing network-based like scp/rsync or Dropbox, Syncthing, etc.