Hacker News Reader

That's true with a separate work phone too right? And once I turn off the AWP for the day, all of that stops.

A work phone I could leave in a lead lined box until I needed to log into the company network. My personal device is often carried with me and in use at other times. If your IT people let you pause your work profile indefinitely that could help protect you though.

The IT people don't get to choose how long you pause your work profile, you do. If they want control over profile access then they need to manage the full device, not just have you run an app in a profile on it.

If you plan on carrying a lead lined box with you everywhere you plan on authenticating for work you can do the same with your personal phone before you switch the work profile on.

Reply on news.ycombinator.com