VM the solution?
I was thinking about this - would it not be possible for the employer to provide a VM image which contains a locked down environment that only contains licensed software and only connects to the office network and is also ringfenced from the laptop it is running on. That way, you can BYOD, but it stops any garbage you've installed on it yourself from accessing the office network or corrupting work files. And also could be set up to prevent people moving files out of the VM environment? And at the worst case, the employer could remote wipe the VM image or re-deploy a clean image, saving the effort of troubleshooting (because all work documents should be being stored on office network anyway).
Or are these the kind of things that they're talking about in the article when they say the tools are likely on the way in the near future?