When I was responsible for an engineering team, developers could choose between a company laptop or a personal one. An MDM profile was required which forced fu

When I was responsible for an engineering team, developers could choose between a company laptop or a personal one. An MDM profile was required which forced full disk encryption, password-based screen locking, company-provided AV, and strong passwords. These were required to maintain SOC2 compliance, and in general are good practices. If a person did not want to do this on their personal laptop, they needed to use the company provided one.