If it's required for my job, then you should be prepared to provide me with tools to access it.
And I will, with a straight face, tell you I do not have a smartphone or laptop while playing a game and texting right in front of you. It doesn't matter if those are mine or if I'm borrowing them, because they aren't the company's property, and the company does not decide what goes on them.
Fair! Personally, I'm ok using my own phone for 2FA vs. getting a Yubikey or something. 2FA apps nowadays frequently have the flow where you tap a button in the app instead of copying down a 6-digit code. I like the convenience.
Pretty much anything involving Intune can GTFO, though.
I have a slight personal conundrum. I agree with thus in principle, and so when the company decided everyone would get a laptop (I prefer to work from home, and while computers exist at the office and for some field techs, plus there is a terminal server, until now I used personal 99% of the time) I was excited and happy.
On the other hand, I've done the two phones thing in the past and now I really don't feel like it. Of course, I don't want any of their MDM on my phone either, and if they start trying to enforce that I may have to bite demanding a phone too.
Either way, it should be an option to have either a company phone or reimbursement if you choose to just have your 1 phone. Containerized MDM would be nice too, since that should ostensibly mean a remote wipe only affects their data/apps and prevents personal/work from interacting.
Is it possible to install company apps and yank out their remote wipe and other unnecessary permissions with ADB or even better, install the apps to Waydroid+Magisk?
This reminds me of when I was adding wifi to the office for the first time and I had one guy convinced it was gonna give him cancer and refused to come into work.
HR made me sit down with him and explain why it won't give him cancer.
After a chat much like this I ended up printing off a booklet from the world health organization on it and he finally felt safe.
I had a choice when I took my meetings online in early 2020, Jitsi Meet (jitsi.org, FOSS) or Z (proprietary, and $$). I choose incorrectly. Right up until they put a part in their TOS, last September, saying they would use our video for training AI. I switched my meetings over to JItsi. Go FOSS, and don't go back.