This just seems like them attempting to be sensationalist. Anyone who has a company device managed with MDM that doesn't think their employer can monitor everything that happens on that device should go back and reread the terms they accepted when they got the device.