Things like DNS tracing apply outside their network too, like WFH situations with no VPN. Overall in practice, there is nothing stopping creepy sysadmin, bound

Things like DNS tracing apply outside their network too, like WFH situations with no VPN. Overall in practice, there is nothing stopping creepy sysadmin, boundary overstepping lawyer or creepy manager from secretly stalking specific employees by pushing IT departments to install extra monitoring software or just plain spying on specific employees.