"No MDM no connection... if the user doesn't like it, tough"
So this is where I have a problem. The typical device and MDM suite combo is like a hammer to crack open a nutshell. Whilst this approach is entirely acceptable, to me, on a device provided by my employer it is completely unacceptable to me on my personal device.
Now, correct me if I'm wrong or out-of-date, but other than a handful of (unpopular) devices that have the concept of partitioning between personal and business data and apps, the big problem for me is that the MDM administrator, once the device is registered, can use remote wipe and will blow away all personal data in addition to their (supposed) target of business data.
I was given the option of being able to access business email on my personal device, with MDM enabled and remote wipe a possibility. You know what, I said no way and that my employer had to provide me a separate device. Since it would be a pain to carry two devices, when I was away on business I just carried my business device and used that for business and personal activities. So, basically, "tough" back at you.