The concern is not literally who owns the network, but whether or not the organization can effectively manage the traffic. There are secure ways to manage that setup, as opposed to, a personal phone where the organization has zero control.