Which is actually a good reason for entities subject to GDPR to forbid use of personal messaging apps on work devices... (And to forbid users to use work / official apps for personal messaging.)

That sounds like a simple solution but it is not that simple, employees have a right to use work tools for personal reasons too within reason.

And GDPR explicitly forbids personal items to be released during discovery even to jurisdictions that require that.