It is completely true. In the US you should never have any expectations of privacy when using a company computer.

It is also done for the prevention of introduction of malware and other IT security reasons, there are legal and regulatory reasons that companies have to do that and there is also protection of intellectual property and reputation concerns.