No one intelligent should be logging into their personal accounts on their work devices in any case - it's always been the case (at least in the US) that companies can do whatever invasive scanning they want on devices they own.