many enterprises run a security requirements check before allowing corp email or other communications on. One of the checks is "is rooted" which android reports

many enterprises run a security requirements check before allowing corp email or other communications on. One of the checks is "is rooted" which android reports via api. This usually disabled access. Another is "full disk encryption", and "boot password". This is what big co I work at requires. Also small co we bought required it for 2fa on vpn. They also want remote wipe capabilities. Exchange does this on phones too by domain. But the place I work has a sidecar app that constantly monitors the phone and locks it out if the rules are violated, with is usually accidental by user or a sign of an attack. I'm fine with not doing so as I don't want bigco's email on my phone, it's super spammy. It's more of a todo list than actual communications, forever base lining permissions.