My employer goes so far as to lock down what devices can connect to our network & VPN, and also locks down laptops so that removable media like USB thumb drives won’t work.

No way in hell I’d let them do things like that to my personal laptop.