Trey Ford of Metasploit maker, Rapid7 is like the pot calling the kettle...
""Not only is the legality of installing this software questionable (CFAA, etc.),".
1/ CFAA only applies to US govt computers. Where is their a legality issue? mSpy is used primarily by parents monitoring their kids, and employers monitoring their own devices. Neither are illegal, and they both have perfectly legitimate applications.
In what way is it questionable to watch how your kids are abusing your computer? Or why shouldn't an employer track and monitor any device used by employees. There is no legal issue here. There may be an abuse of ethics by an overbearing employer or parent, but neither of those are illegal.
If, as an adult, you want privacy then pay for your own device instead of relying on your employer. And refuse to hand over control of your own device to your employer.