But the problem they try to solve is: user's device is not under full control of the service provider. The only solution to that problem is to take away the control from the device owner. You cannot have both.