Probably both. It’s fairly common to be able to add your work email to your personal phone. That gives the Outlook administrator the ability to monitor what’s installed and remotely nuke data.
It’s extremely useful to get your work email on your phone when your job requires you to be somewhat available all the time which represents a lot of senior jobs in the EU institutions.
I don't think it's a fair comparison. Yes, Google and Apple and Meta all collect data, but they are part of a country where their misuse can be challenged in fair courts and they can (and have) been fined.
I don't think if Meta was a Chinese company they would have ever had released(or allowed to) end to end encryption
Are these private smartphones used for work, or unmanaged phones issued to personnel?