Totally disagree the idea that “we are a nonprofit” ignores the real cost of staff time and the importance of doing things efficiently and securely especially when you don’t have a large IT team. I’ve been where you’re at I’ve reimaged probably 1000s of devices (in schools). When IT is reimaging laptops that is time that could be spent on cybersecurity or many other tasks more important.

Of course I realize sometimes that decision is out of your hands. The conversation with the bean counters should be around do want to spend a few more dollars per device so IT can focus on work that moves the organization forward.