An MDM orga cannot install a trusted CA on non-supervised (company owned) devices. By default on BYOD these are untrusted and require manual trust. It also cannot see everything on your device - certainly not your email, notes or files, or app data.

If it is untrusted, you also won’t have a TLS connection be established based on that CA.

[dead]