It's pretty understandable. My last job was in ad tech, and as part of the employment agreement, we effectively signed away our privacy rights through a clause that effectively waived the privacy rights on any machine that interfaced with any thing related to the company. Problem was - how does someone make the distinction between viewing an ad for work purposes and viewing it for work? Not to mention the company gave very reasonable incentives to use your own phone for work, etc.