For context, when the article says "a list of work-related apps and websites," this includes Google properties like gmail, docs, etc, and social media websites like Facebook and Instagram, with no provision for excluding personal accounts.
At meta your personal FB account is your work account. I had to create one to get paid. It’s the same identity used in internal systems.
You know you are at work and monitored.
You can browser personal accounts from your phone.
No one intelligent should be logging into their personal accounts on their work devices in any case - it's always been the case (at least in the US) that companies can do whatever invasive scanning they want on devices they own.