You can imagine different tiers of security, where a work profile gives you minimal access to corp while a fully managed setup gives you more substantive access to corp resources and allows a company to enforce more security and visibility into the client device.