Hackers would be better of looking for a flaw in the security envelope in the enterprise than in the security envelope of my internal network. I am pretty confident in stating that the only way you could compromise the Raspberry Pi is if you had physical access to it, and you'd still need to get past the encrypted filesystem and the password on the OS. I think there are higher value targets with less security than a Raspberry Pi that lets me sign in to MSTeams at a specific time of day. Would I deploy this on anything that was critical or mattered? No. Would I let one of my team deploy this on anything that was critical or mattered? Also no.

As a footnote, I can guarantee I could make it work on your company provided phones too. Even when they're locked and with a biometric scan requirement and the inability to run any non-approved software.