> Default permissions are the ability erase everything No they aren't. You get no permissions by default. You have to do work to get any. What's likely is Dev

> Default permissions are the ability erase everything No they aren't. You get no permissions by default. You have to do work to get any. What's likely is Device Administration was added as a feature for exchange admins to remotely erase compromised/old/whatever phones.