Do you have Advanced Data Protection enabled on your Apple ID? Configuration Profiles can also be a good way to more strongly force certain settings on devices

Do you have Advanced Data Protection enabled on your Apple ID? Configuration Profiles can also be a good way to more strongly force certain settings on devices, including that functionality be disabled. They’re how MDM works in most corporate settings.