Worse yet, what about companies forcing employees installing apps on their phones? Pretty much everything now requires 2FA, and many are moving away from SMS to app-based authentication (e.g., AWS does not support SMS 2FA anymore). So I now have to install their authenticator app on my personal phone and use it for 2FA.

Some companies also require (or at least encourage wink-wink) you to set up mobile access to your email/slack/whatever and you have to do it on your personal mobile, knowing that now your personal device has data owned by your company so there's all kinds of legal implications and of course you have to give elevated access to the admins so that they can wipe the thing if things go south...

If I understand correctly even Europe does not require employers to provide business phone, leave alone the US. Hopefully something will be done about it at some point.