If a device is owned by a corporate entity it becomes trivial for them to engage in wildly intrusive monitoring.
For example, if Apple can verify the device was purchased by a corporate entity and then enrolled in an mobile device management system, it will allow a lot of things that it won't allow on a personal device - things that can be used for monitoring.