Didn't like what I saw regarding device privacy with the new company email app, so I solved the problem by installing it on a quarantined device that exists only for company email and QA testing.
It's an iPhone with no SIM card, so Wi-Fi only, but that's not a bug, it's a feature. :-)
And yes, this solution isn't for everyone, but through a quirk of fate, I ended up with two free phones (in addition to my personal iPhone) courtesy of the company. Might as well get some use out of them.