I won’t accept an MDM device for personal use.

This is why I carry two phones. My work phone is an iPhone managed by Intune. It does work stuff and only work stuff. My personal phone is a Pixel 9 Pro XL. It goes on a VPN when on work wifi.

I do not, nor will I ever, understand those who use their work-issued phone for personal things.