It's good to know that they can't bypass wireguard or Tor. I was a worried about that.
As others have suggests, I will probably use a separate device to check my mail. That seems the safest and fairest option both from the company and my perspective.
Yeah, I'll use my own device, log on to the guest network and start Wireguard on my laptop. Seems a fair choice both for the company and myself.