CDs have an advantage over USB drives in that they can’t actually secretly be USB HID devices like a fake keyboard or mouse that runs a bunch of commands when it plugs in. It’s only a storage device.

A super secure environment might then lock down all USB devices to ones known by them and then epoxy all ports and devices.