Whereas I never worked in places where IT would not see that as a security violation.

Correct, because other companies are not in a position to certify the security of iCloud meeting their own standards. It shouldn’t surprise anyone that Apple trusts Apple more than other people trust Apple.

Same here

Which is the point I've created a work Apple id unless they specifically set it up to prevent it.

Which has happened. Bonkers configuration.

I've always created a new Apple ID with my work email for every place I've been that's issued an iPhone. No chance in hell I'm signing on to a corporate managed device with my personal Apple ID.