Copying to an external drive would be way worse than using your own email. With the email you can prove that that was the only data you moved to outside the company. With an external drive they’d argue that it might be a habit, question what else you moved and sue the fuck out of you for breach of contract + violations of NDAs.