So one compromised device and all the data is out there? Shouldn't this be restricted to on-premise-wifi only, highly locked down tablets that only allow the u

So one compromised device and all the data is out there? Shouldn't this be restricted to on-premise-wifi only, highly locked down tablets that only allow the user to run the specific apps?