> Shouldn't a standard MDM block non-essential apps by default? Yes. But there are some (big) assumptions here: * The MDM (or EDR for desktops) is well manag

> Shouldn't a standard MDM block non-essential apps by default? Yes. But there are some (big) assumptions here: * The MDM (or EDR for desktops) is well managed. * People with admin access aren't circumventing it.