Activating the camera or mic without consent? Yeah, that’s bad.
What about recording which websites are visited on a work device? Not so unreasonable.
Taking screenshots of desktops at random intervals? Could be a huge liability if you capture some confidential information and the screenshots go into an unmanaged data dump.