I was at a subsidiary of a very large company and had work slack, email, and all my code on my phone, without even the thing that lets them remote wipe your phone.

It has to do with culture and willingness to put in the effort by the security organization