Maybe it means he is not allowed to send work data to personal devices?

Right, but then I am sure the company not going to allow him to run on some random company’s VMs.

I’m realizing I’m arguing in an implicit feature that isn’t being explicitly discussed.

I would expect this service to eventually offer an enterprise feature. Having my employer fully control a VM does not break any data barriers.