Work provides a phone and laptop. Neither are touched after I clock out. But for the off-chance I need to do a work thing at home (filling out a forgotten time card entry, informing the team that I’m sick, etc), I have a separate and isolated “work” VLAN at home they can connect to.