And you would still get caught on the company device trusting company CAs, thus enabling them to decrypt all your traffic.

Use a personal device on a personal network for personal stuff.