One of the things that really scares me about this is the configuration profile thing. Yes. These profiles might contain just an email account. But the UI you g

One of the things that really scares me about this is the configuration profile thing. Yes. These profiles might contain just an email account. But the UI you get when the profile also contains, say, a new root certificate is the exact same UI. As a user there's no way to see whether the profile you just accepted is just adding an email configuration or whether it's setting a global proxy server that even does SSL interception because the profile also contained that proxies root certificate. Worse, by accepting one of these, you could also (again, same UI) accept whoever sent you the profile to use MDN functionality on your device, allowing to track the devices location (GPS accuracy) and to remotely wipe it. For these reasons, I would never, ever, ever accept a configuration profile and I would recommend you don't accept one either. This isn't just for linkedin either - a grocery store chain here allows for easy camera based self-scanning. The only thing you have to do is to accept their configuration profile so the phone can join a special in-store WiFi and I suspect other companies do the same crap. Accepting one of these is as close to installing malware as you can get.