I will state that I have never used Macs in a corporate environment. Every Windows laptop I have ever had has an employee has so much extra corporate security

I will state that I have never used Macs in a corporate environment. Every Windows laptop I have ever had has an employee has so much extra corporate security software on it that they can remotely lock me out, reset it, wipe it, etc. They don't need the password I use for anything. Does Apple or any third parties make software to do this? Essentially the T2 security chip needs to allow 2 passwords so that both the user AND corporate IT can reset the machine etc. If a company is leasing laptops then they need to treat this process like an apartment security deposit. When I rented my first apartment I had to pay one month's rent up front. I moved out 4 years later and they inspected my apartment for damage and after they found nothing wrong they gave me my original security deposit back.