They'll still stick it to the man when their employer expects them to provide a personal phone for 2FA and don't have one.
Several people at my work refuse to install work software on personal phones so the company bought them yubikeys to use instead.
I held out on this after a factory wipe on my phone invalidated my authenticator keys. The IT guy ended up using his own phone because cheapskate companies won't pay for real security.
Eh just offer a hard token or yubikey and be done.
If my employer expects me to use a phone for work, I expect them to provide the phone.