WFNK
You can deliver a virtual desktop securely to any part of the planet, even on modest bandwidth. You do not need to give that worker anything other than type, click and see.
The earlier posters were nearer the mark.
Employing a worker sight unseen, and did we actually check the references we were given? Assume the qualifications and professional associations were from identity theft, so new hire X isn't really X at all.
Not segmenting our information? That's just sloppy, and usually results from understrength support. No-one pays any attention until something really valuable is stolen, then suddenly meat's back on the menu, boys!
"Customer Y demands [alternate insecure] product Y" - I feel your pain. Maybe sandbox, restrict and log? No, you CAN'T use it for everything!
Oh, and fake worker isn't doing much work? Then neither is their manager, or the manager is managing too much else. Who signed off on this character, anyway?