I agree. Android a has sandboxed work profile that limits what the org has access to. The employee can also turn off all the work apps at once.

I see nothing better about Apple’s all-or-nothing access approach.

Maybe this lawsuit will nudge Apple towards the Work Profile approach of Android. Sounds like it could have addressed the employees concerns.