I would expect Apple to actually simplify the problem and not overreach and just do activation / provisioning / deactivation / lock and none of the other stuff

I would expect Apple to actually simplify the problem and not overreach and just do activation / provisioning / deactivation / lock and none of the other stuff MDMs try to do that introduces the complexity.