Employers decide that about literally all the characteristics in the hiring process and all the conditions of continued employment. You may don't think it's ok that they get to fire you if you violate the "acceptable use" conditions of their information security policy either, but that doesn't actually matter. Since abiding by the acceptable use terms is (almost always) a condition of continued employment they can and will.