That's really interesting to hear, I assumed wrongfully that most places have similar policies in regards to devices (from my experience, and my peers').
Maybe where I'm working we're more harsh than usual:D because we've got the full package - company laptop, transfering anything work related to personal PC is a no go, at home we must use VPN with 2FA, can't connect unapproved USB devices (including mice, keyboards, phone charging, anything), heavy website moderation, and heavy user-based access moderation for anything, and the company laptops are 100% tracked - you have no privacy on it. Even personal phones have to follow some security measures to keep Slack and authentication app (screen sleep <5min, screen lock is a must, and Slack is password protected).
I really understand where you are coming from, but that's definitely not the standard I have witnessed so far.