I agree with your comments. As far as I know the work flow software and PDKs used for by the foundries (I know this is true for at least global foundries) has essentially unlimited liability (e.g. for "leaking") , so they often are running on dedicated computers even fenced off from the network. I find it hard to imagine they let hardware engineers take it home.