2FA on itself is good, but should not be an excuse for corporate to own my cell phone. They want to send messages with codes to my phone? I'll live with it.

2FA on itself is good, but should not be an excuse for corporate to own my cell phone. They want to send messages with codes to my phone? I'll live with it. But then they want me to buy a phone with more recent android version. Then they want to enforce biometrics and encryption on my phone. Then they want to remotely erase my phone? No. If central IT wants that kind of access, they should buy me a phone.