Need help selling this to my boss

Big fan of LMI. Long time user. We've acquired a new company that has their own IT Director, that has concerns about the security of their network while using LMIC on their network.

I'm very well versed in the typical security points LMIC will point me to, such as, MFA for user access, monitoring, alerts etc.

The real question that I didnt know how to answer was, what is the exposure to a company network, by an employee that uses LMI to connect from their home computer? Forgetting all the user intentional misusing the system. I mean things like if there's a virus, or worse a worm, on a remote users machine, can it gain access to our network?