They have the ability to turn off the web access now. My company recently did just that - if I try to access office.com on a personal device, my log in is blocked. Works fine on a company controlled device.
I’m not sure how they tell the difference since it’s through the browser. But my guess would be something to do with the lack of all their security software they load onto company controlled computers that have hooks into everything.