Like yours, current, and last companies definitely have some spyware-ish tools installed on the laptops. I wish there was some tool or documentation on what it

Like yours, current, and last companies definitely have some spyware-ish tools installed on the laptops. I wish there was some tool or documentation on what it is doing and what the capabilities are. I've tried to look into it but there is not much information available. I find it annoying to haul around and switch between two laptops (especially traveling). Here's what I have done: I bought an external SSD and a usb 3.1 type-c enclosure for about $120-130 on amazon and use it as a boot disk (hold option while booting). This way I can boot my work laptop into a physically separated OS for personal use. I use whole-disk encryption on that disk via FileVault. I also symlink my source code dir to a separate volume on the internal SSD drive so that I can access it from this second OS if I need to pull some code over to work on it. Warning: I recommend testing this with a cheap USB stick before buying the drive because booting from external disks can can be disabled with profiles.