The phrase "crosh commands evil" appears to have originated from a combination of three sources:
For IT administrators worried about the appearance of danger, you can restrict Crosh via Google Admin Console: crosh commands evil