I don't have any special MDM creds, but I do have an admin account on my OS.

Probably not the avg user or engineer (though giving engineers admin account on their local OS is common). But that's hard to predict because usually you'd want to enroll, so I don't often see people trying to avoid it. Usually it's because of a bug. In my experience if the MDM process is buggy then it's more likely to be bypassable.

Setting a firmware password and blocking boot to external drives makes it harder, but a lot of orgs don't do it.