Removing access of users to their device is not security. At least not when users do not want this.
Your choosing to frame it that way is, at best, fraught.