Sites, and other cloud storage are blocked. But sometimes legit websites can also be used to exfiltrate the data, in this case VS code web version Elon mentioned. You hunt for these activites, will get alot of juicy findings.
Chinese alternatives for pastebins…it’s usually a best practice to block any traffic to CIS countries. The drive thing, unless someone is having local admin access on their machine, and also can change registry. They can’t share the data.
Generally mounted drives data are logged as well, which is most of the cases shouldn’t be utilized by users, unless there is some business expectation. Including the drive name and mac address, plus the number of times, it’s been used on particular host.
Everything is trackable, just being lazy af, also it’s true not everything can be blocked.