Spyware aside - I think about data breaches, even if my phone is "secure/compliant".

Scenario: Your account gets compromised somehow. It's signed in to your personal phone. Company data gets leaked or ransomed.

Your phone and its contents are now evidence.