we're now vacillating between a Bring Your Own Computer policy and keeping one machine we don't give a crap about for the use of guests

A middle ground may be to create a guest account without admin privileges, which should limit the possible damage. But it's true that the more personal and essential these devices become, the more sharing a computer or phone starts to feel like sharing a toothbrush.