This "stop and think" warning is very good, but let's be honest, in many roles you can't say "no" anymore. Most companies require a significant subset of employees to use their personal device for work and have corporate accounts active on it.
It may not be true for you personally, but I bet it is for most people who have on-call rotations.
Features like Android's separate profiles are critical. We need similar sandboxing on all platforms. I don't think we can change the 24/7 availability culture, but we can change things from a software side to make it less onerous.
A company cannot force you to use your hardware to run their business at least not without compensation. Having a phone number that can be paged is significantly different than installing MDM software that can track literally everywhere you go, wipe your phone without your permission, etc. If a company is saying you "must" install something in your personal device without any compensation on top of your regular paycheck this is incorrect. If you use your own car for work you're typically compensated with mileage or you can write it off on your taxes.
I've often thought that if everyone, or even a majority, said "no", then we could have better policies. As it is, I've been the only person at my last two workplaces to object, and there's no way they're going to put in the effort to work with me.
So it is that I've given permission to confiscate my personal cellphone in the case of a breach. Otherwise, I literally couldn't do my job -- not because of anything particular about our field or technology, but because it was easier to set things up the way they are. We could spend a few days changing our alert structures, etc, and no-one would have to have "sensitive" data on their personal phones. But that's not going to happen for one employee.
It may not be true for you personally, but I bet it is for most people who have on-call rotations.
Features like Android's separate profiles are critical. We need similar sandboxing on all platforms. I don't think we can change the 24/7 availability culture, but we can change things from a software side to make it less onerous.