> They make this sound like MDM is some scary third-party attack on their platform, neglecting to point out MDM is a system they designed. There's always been s

> They make this sound like MDM is some scary third-party attack on their platform, neglecting to point out MDM is a system they designed. There's always been some schizophrenia from Apple around MDM (publicize new control features to admins in one release, add a big scary vague user-facing warning when that feature is actually used in the next release), but their general stance has consistently been that you, as a company, have a right to enforce whatever restrictions are available on devices used by your employees so long as you own them, and so long as you accept whatever user-disclosure features they decide to implement. Likewise, you have a right to enforce a more limited suite of controls on your employee's personal devices, so long as it's all opt-in. Right, sure. I got a work device and the company owns it and I don't do my own personal stuff on it (and hopefully other folks follow suit). If the company screws up its security, those devices are utterly compromised. MDM, for all its good intention, is a comprehensive surveillance system for a phone. It is a little piece of the corporate panopticon on your pocket. That can actually be quite convenient, but I certainly think folks should keep the aspects of their lives separate. It's a bit different with kids and parents though? MDM is a massive invasion of privacy and unlike in the work phone relationship, we'd expect a vulnerable young person's entire personal life to be embedded on the device. Also, children generally don't have the option to walk away from their parents and find new, less restrictive parents. It is true, the parents own the device legally. They can take it away. That isn't necessarily a call for Apple to enable parents to run spyware run by third parties. Quite frankly, third parties no well-informed consumer should trust given their abysmal track records for privacy and security issues. The idea of Kaspersky running the intermediary rendezvous server for all of my child's private communications is pretty scary to me. I appreciate the desire to keep kids safe, but coming from an abusive home I have to tell you that computers were my escape from physical and mental abuse and I am fairly sure I wouldn't be alive today if my parents could have closed a net as powerful as MDM around my life.