Please no. 0 chance I want my phone to be controlled by some enterprise device management crap. Employers should provide a dedicated 2fa device (maybe a phone)

Please no. 0 chance I want my phone to be controlled by some enterprise device management crap. Employers should provide a dedicated 2fa device (maybe a phone) if the employee wants but I can't think of the security case for employers to need to control / remote wipe the 2fa device since they could lock the account it is providing access to.