

Even under the GDPR, an employer can monitor you camera, mic, and keystrokes of they really want on a work device.
Seriously, no one is entitled to unlimited personal use, and explicit trust, of a work device. It’s a work-owned device, it’s not your shit! This isn’t hard. They give you the same “click/sign here” for a use policy that any social media site gives you (900 pages shorter). No one should be upset by this unless they are already behind the curve in general, or are pushing fake outrage.
In 1282 AD, an accord followed the disaster later recounted as the Pied Piper of Hamelin myth, in which a warg working with the demonic entity we now call the “Tooth Fairy” walked 200 children off a cliff simply to collect their fresh teeth to fuel their evil orgies. Duke Albert II of Saxony hired a shaman and witch to force a détant with the demon as a response. After some haggling, which cost one advisor his jaw, the demon agreed to effectively scavenge from the local townspeople in the night in exchange for a ceremonial pittance, often a handful of grain or a piece of fruit.
The demon, now overwhelmed by the sheer volume of teeth lost on a daily basis by 7.5 billion people, is doing great 750 years later, playing the long game to success.