aethondon one thing to keep in mind, the requirement to use the intune app, outlook app, and Microsoft keyboard, is entirely due to the intune administrators of your employer. We don't require most of that. We only require the official outlook app in order to apply some specific conditional access and data loss policies.
What your employer is doing is very typical. They're very likely on a GCC tenant with Microsoft. This, coupled with Customer Lockbox means they're not reading your work data.
In the enterprise environment, I actually do sort of trust Microsoft. Mostly because there's no great alternative. That being said, in the consumer world I wouldn't touch them with a 10 ft pole. They are among the worst.