I feel like this is on track for most places, an above board explanation of how safe your personal data is. If they are going to assume no personal web access on their systems, or not give that access privacy then you have to evaluate if that is the right environment for you.