The thing is, users usually don't know what they're doing. Users are accustomed to clicking through promtps and usually have the "meh, some stupid security thin

The thing is, users usually don't know what they're doing. Users are accustomed to clicking through promtps and usually have the "meh, some stupid security thingy again, who cares" attitude. There are the HN people who can actually read prompts on screen and understand what stuff means, but most people can't (or don't). They can't differentiate between a legitimate app that, say, wants to re route all your traffic through a server b/c parental controls, and another app that wants to do it for "making your internet traffic faster" while spying on you. People installed fake RAM extending Android apps, what are we even talking about. Even if the users understood what they were doing, they probably didn't know the risks associated with installing an MDM profile. THey didn't know what data exactly the app makers were getting and how they were using it. Even I don't know that. I know where to find such information if I need to, but I don't know exactly the permissions of an mdm profile by heard.