TFA said that physical and/or software locks were too complicated for your average IT site, so an iPod ban was smarter. As you say, they're not really, and I say, it's not.

TFA also ignored the fact that a ban on having an iPod, because it is not related to actual security risks, is an opportunity to be sued for wrongful termination if a firm were to be so stupid as to attempt enforcement.

Too bad that "social engineering" has acquired a negative connotation of theft. Some positive social engineering is obviously called for, perhaps with hardware/software solutions, any time such a draconian policy is suggested. Security freaks, who do not understand ordinary human beings or today's HR environment, should not be in charge.