

I don’t mean compromised, I mean your IT manager has an acceptable use policy, which all staff agree to in writing, and the IT folks have to pass audits that say they can assure management they know what happens in the company network.
I agree that keyloggers are dystopian, and honestly overkill unless you are paranoid about proprietary data. But you should follow the same philosophy as your network architecture: Zero Trust.
Even under the GDPR, an employer can monitor you camera, mic, and keystrokes of they really want on a work device.
Seriously, no one is entitled to unlimited personal use, and explicit trust, of a work device. It’s a work-owned device, it’s not your shit! This isn’t hard. They give you the same “click/sign here” for a use policy that any social media site gives you (900 pages shorter). No one should be upset by this unless they are already behind the curve in general, or are pushing fake outrage.