it’s missing --no-preserve-root

that’s creepy as hell 😂

without encrypted client hello (which isn’t really adopted) the hostname ist submitted in plaintext, unencrypted. so the ISP can totally see which websites you‘re going to, even it you use a secure dns server

got me 😂

charge them for it

yes you should be. that thing probably is literal malware. is it even legal (where you live) for your employer to force you to install such a thing on your laptop (i assume it’s a personal one)?