If you have a work-profile that's created through an MDM, your work-apps are isolated from the other parts of phone and your workplace can set restrictions on how those apps can interact with the rest of your phone. Clipboard sharing may be allowed or not, installing Apps on that profile by yourself may be allowed or not, certain WiFi Networks may be saved, you get the Idea. The benefit is that if you leave the company, they can just remove that profile remotely and both, you and the company you work(ed) for, can be sure that you don't keep any work-related data on your phone. The benefit for you is that android gives you a toggle to switch all of those apps off, so if you're on PTO you can just hit the switch and it's silent.

how do you CYA?

get written permission to sign-in to your work-related accounts on your phone