This is a feature, not a bug. If you don't want your personal device to fall under your organization's security policy, don't connect it to your organization's Exchange (or any other) servers.

It's saved our bacon in regards to stolen devices a few times.