In fairness, that's an incredibly glaring MDM problem that was always going to blow up like a landmine if Apple didn't address it. I'd expect the macOS MDM policy to cover this if Apple was actually concerned about IP leakage.

Yup - exactly. Its crazy they havent developed a solution to this for their customers (let alone themselves) or bought out one of the companies that tries