I dont think this is mentioned enough. These days it seems a given that you’ll install XYZ app on your personal phone, or use your personal PC for something.

No. If you require me to install something then I require a device to install it on.

I also think people dont realise that often throguh active exchange IT can fully wipe your device. And Ive seen too many shitty IT operators who would accidentally do this.