It sounds your device isn’t managed by an MDM. Did you accept a new cert from work and a bunch of scary messages when adding the account? If you accept the MDM

It sounds your device isn’t managed by an MDM. Did you accept a new cert from work and a bunch of scary messages when adding the account? If you accept the MDM you will give root accesses to your company’s MDM system. Basically giving them as much access as Find My iPhone or whatever the android equivalent. Location tracking, remote wiping the phone, access to texts and calls...everything. Yes they could access your texts/calls/emails everything.