“The company network” is no different from the coffee shop WiFi next door, just has more bandwidth.

We still restrict web access to company managed machines but it’s a layer, not an essential boundary.