Uhm, disallowing third-party stores, sure, but you draw a line that allows a non-jailbroken and updated device to be able to access company data? How is the lack of third-party app stores gonna prevent someone from sending sensitive data through the Mail app or to iCloud? Shouldn't company devices be managed with MDM to begin with?