I know that Macs can give that level of assurance. One click from the MDM can brick the machine out to the point where it cannot even be booted from external me

I know that Macs can give that level of assurance. One click from the MDM can brick the machine out to the point where it cannot even be booted from external media without a code, and another trashes the encryption keys and does a factory reset.