I think the assumption is that the work laptop has bossware or at least logs that get audited for that stuff.