[elliotec]

I’d say generally for most people, at least anecdotally, their work laptop is their only laptop because they’re expensive and have good specs. Especially for Apple products (which is the majority of the share of hardware in this anecdote), it’s natural to want and expect the continuity between devices.

Employers usually allow this or don’t explicitly forbid it, and most employees aren’t exactly security conscious or willing to sacrifice convenience. So it’s not that shocking to me, but it is weird that there isn’t more education or rules around it.

[RDaneel0livaw]

This is true for me. I have a personal desktop, but for mobility (laptop) my work issued MacBook M1 Pro is the only thing I have. There's no reason at all to purchase a personal laptop since my company is fully remote and they purchased the laptop from apple and had it directly sent to me, and have never required me to install any kind of monitoring software or control software on it at all.

[EricE]

Good luck when your laptop gets scooped up in discovery/litigation. After having been through lawsuits at work there is ZERO chance of me ever putting anything personal on work equipment.

[oyashirochama]

Duplication and backups are a requirement of life IMO.

[emptiestplace]

"Directly from Apple" does not preclude monitoring and control, but it would've notified you on first boot if it were MDM enrolled.

[Onavo]

Most tech companies (except some really big ones or those with compliance requirements) are quite flexible around this issue.

[emptiestplace]

I would qualify that "tech companies that don't know what they're doing wrt IT". Apple does have some features to allow a bit of flexibility, but unless you do all of your work via VDI or similar, I'd consider non-MDM devices to be a huge red flag,

[Onavo]

It's called trusting your employees, especially if they are engineers. Maybe that's why "nobody wants to work anymore".

[emptiestplace]

MDM does not imply surveillance. I wouldn't use it if it did. It does mean I can enforce full disk encryption and remotely wipe a machine if it is stolen, though.