The Board site opens on a work PC, and not on a private one.
With a label on the Board site, we can ask for more than a valid sign-in. An authentication context connects the label to a Conditional Access policy that requires a compliant device. Three parts have to fit together. Eli tries both his work PC and his private PC.
Step through More in Protecting access to sensitive Teams and SharePoint sites