Your counterexample is a straw man argument where the example approaches abuse.

My reasoning of why employee surveillance is fine is that there's a genuine purpose/need (measuring employee productivity) while personal privacy is retained (e.g. don't import personal information into the corporate 365 environment and personal privacy is retained). I'm not saying the metrics provided by 365 are correct, but I don't see the legal argument against it.