1. I don't use a company supplied computer, and haven't in 25 years.
2. I don't use the company proxy (I'm good at getting around those).
3. I'm the Sr Admin usually so I just turn that shit off for my enterprise login.
In this respect, the employer is a Third Party and the SaaS (the first S being superfluous) provider is the attack surface.