100% agree, just that sometimes not every company has the resources or inclination to do that. The best middle ground is some kind of solution that allows the security team to "manage" personal devices in some way.
No thanks. I'm not compromising the security of my personal devices to save my employer a couple hundred bucks a year.
Oh that is the "best" "middle" ground, is it? Are you sure?
Why should anyone bring their personal device just because the company is to cheap to buy a few phones and then have them basically owned by their IT anyways? Do you realize how crazy that is?
You might want to think about that one again.
Every SMB can afford a few cheap phones for its employees, MFA apps dont need flagship hardware. If a company can't, maybe it shouldn't be in business anyway.