This is why please have a personal account and personal devices for anything that does not relate to your company or work. This is super critical.

Heck I'd often carry 2 devices if I was traveling, there's no way in hell I would use company laptops. Anything I did on my work Mac, I assumed everyone relevant at work can access into. Kandji already hands over a ton of data wrt this, and I am sure every other MDM solution does too.

You gave your consent when you got the work device and probably signed a document/stated that this was to only be used for work purposes.