They also probably gather data on your device ID, so if you’re logging in from a personal device from a different location, it won’t get flagged