Cut through the hyperbole. Using a personal phone for work email is fine. What you shouldn't do, as with any service, is blindly except ToS without reading them.
As an Enterprise Client Services administrator, analyst and architect I can say pretty definitively that a properly designed Enterprise EMM would never need the permissions described in the article or perform the functions described. If you work for a company you don't trust, then yes, you probably don't want to use your personal device.
From a managed personal device perspective, we only manage our data. We would never wipe a personal device unless the end user requested it from us. Why? Because when we need to remove company data, we are properly designed. We can remove our company data without needing to touch personal data. Any company worth it's salt is using a combination of MDM and MAM (EMM). Android for Enterprise is awesome for creating a hard visible separation of work and person. iOS is less good at presenting that separation, but it does exist with properly configured MAM. Requiring a passcode of specific complexity---if that is a real concern, you probably shouldn't have a phone to begin with--- but I won't preach. Even requiring a "complex passcode" we still allow you to use Touch or FaceID for convenient access.
If you work in a highly regulated, or secure industry that requires heavy security then you are more than likely being provided a device. If you aren't then I would question that companies compliance with their regulatory body.
Ultimately though, read the ToS