Not a security engineer so can’t comment on the threat model. But an insider threat like a rogue employee can do as much damage with a managed laptop vs an unmanaged one IMO.