Personal laptops go on guest wifi with zero access to company resources, just like personal phones

+ everybody working in tech has a large mobile data plan, no reason to even connect to the wifi guest network.

+1, guest network is risky. Even VPN/ts is risky, since you're actively hiding what you are doing. Mobile data only.