Jiří Král

You will likely be asked to install extra security and monitoring software on your personal device to view work related info or check email.

You can set up another user on Android which will practically completely isolate this software from your main user. Since it’s your phone and it gets installed by you it gets treated as any other user app and AFAIK cannot break the isolation between multiple users like system or organisation apps probably could do. You just saved yourself few hundred dollars.

The only disadvantage I could see is you not getting notifications from your work user applications when you are using the main user.

Have you tried running paint.net in Bottles? It would be less overhead.