What they should do is separate software from hardware, and require that the devices not employ measures that prohibit the installation of 3rd party operating systems, including through physically damaging the device, like Knox. Basically, you should own the hardware free of software limitations.