As the MDM manager for my family, I must whole-heartedly disagree. One common but sophisticated attack involves getting your victims to install your own MDM ce

As the MDM manager for my family, I must whole-heartedly disagree. One common but sophisticated attack involves getting your victims to install your own MDM certificate on their machines, because you've convinced them that they're getting some sort of free lunch. After they install your MDM certificate, you own their machines, and you can do anything with them that you want -- make them into your own private bot army to rope in more victims, or whatever. But if the devices in question already have an MDM certificate installed, that prevents this kind of attack. Running my own MDM profile also means that I can ensure that my wife's devices are always up to date, because I can enforce this at the MDM level. And that's an important issue for her employer, since her law firm uses BYOD. So, I can use my MDM profile to ensure that all their requirements are met and enforced by my own MDM.