I have two laptops, a work laptop and a personal laptop. The work laptop is supplied by my employer and as far as I'm concerned they can install whatever they damn well please on it, because the only thing I use it for, and I mean the only thing, is work - no Internet searches, no random software downloads, not even HN. A patch of tape over the camera and away we go.

My personal laptop stays personal. It's mine and doesn't belong to anyone else. I never use it for work, even if alongside me during working hours. Zero crapware, minimal AV.

I have the same approach to phones. There's my phone, and my work phone. I was pressured to put Outlook, Teams on my personal phone since my work phone is switched off out of hours - I nearly succumbed, until that Office Portal app wanted to 'manage my device'. Nope. Our primary on-call comms mechanism remains SMS/direct call.