My dude this for official use, they ought to already have MDM on official devices. Thats like saying they want them using a specific phone so they can read the email they administer separately.

I think you’re woefully misunderstanding