If the data is sensitive just give them a cheap whatever machine and have them connect to a vdi. That way the data never leaves your estate and means you don’t have to worry as much about the device being lost/stolen. If this isn’t an option I’d strongly recommend looking into an MDM solution for your devices.
They’re a huge fan of doom mods and level packs.
As an owner of a 13 I really like it. I only use it mostly as a YouTube and email machine while most ofy heavy duty work is on a desktop but it does well enough running popos. They are a bit pricey to buy new thiugh so either get one of the older one used or go the used think pad route for a similarly repairable experience.
Given you essentially made no money of this would you stick with crypto if you did this again or go with a more altruistic project such as folding@home as that would provide essentially the same heating effect?