> There is so much corporate spyware out there that you never know if you can really trust your company or its employees not to snoop around your network. It's so easy to set up that it should be a no brainer even if you fully trust both your company and all its IT employees and their boss and boss' boss etc. And they don't even have to actively snoop now, just regular operating system auto discovery stuff that ends up in logs can be enough for 'later'.

True, the EDR product (one of the big names) has this feature where it explores the network environment around each laptop using nmap-style techniques.

This feature is also actively being used so I've decided to do the same at home, set my work computer on a locked down VLAN.