Yeah, this article doesn't match my understanding either. When I went through the setup process on Android I clicked through a permissions dialog, similar to wh

Yeah, this article doesn't match my understanding either. When I went through the setup process on Android I clicked through a permissions dialog, similar to what you'd see when installing an app, that laid out what exactly the administrator would be allowed to do. To be sure, some policies effectively grant root on the device, but mine just asked for permission to disallow insecure lockscreen settings and to remotely wipe the device (needless to say, my personal data is all backed up elsewhere). This was on an older Android version; newer ones also allow device policies to be scoped to work profiles. The article makes it sound like once you accept one of these policies the policy server can subsequently push out an update with more permissions and the user doesn't get a chance to opt out. But surely that must not be right?