Wouldn't most of these issues be addressed by the company managing their own work-issued laptop, presumably with an always-on VPN and full disk encryption? Same

Wouldn't most of these issues be addressed by the company managing their own work-issued laptop, presumably with an always-on VPN and full disk encryption? Same for work phones. Customer data and production cloud credentials should never be on a personal machine, period. Printer could be an issue, I guess, but most tech jobs don't involve a lot of printing and if they do a USB only printer should be supplied by the company.