So basically the same as half the school administered laptops full of remote spyware. We had one of those bought home, supplied to teaching staff, the spyware was never disclosed and it used to sit on a desk in the bedroom. The rule now is we buy and control our own devices, even if they have to run shit like Windows for compatibility on some. Enterprise versions of Windows will almost certainly ship without crap like Recall as it might conflict with the enterprises third party spyware. Unfortunately there is still intense institutional resistance to moving away from the Microsoft ecosystems in some organizations.