I’d wager to agree, I don’t play in this space much but I can’t imagine MDM being unable to handle this kind of basic use case, and also for most companies the confidential data being worth enough to be more careful than relying on MDM. Sure if you work for a compay that builds weapons for the USG you probably need to worry about hardware chain of custody. But those people are not sending their employees home with laptops anyway. In other words, if you trust your employees enough to take that device home, whatever you have on there is probably fine to be handled by MDM

I can't speak to FileVault, but Bitlocker and TPM can be quite easily defeated through sniffing the bitlocker key as it's transmitted from the TPM chip to the CPU to decrypt the drive on boot over the LPC, I2C, or SPI bus. Unless you enable TPM+pin for preboot auth you can't easily protect the data on a Windows PC, even with FDE.