Yes, you're correct, and I didn't mean to imply that MSFT forces employees to install their MDM on personal devices. It was optional for me as well, with a large full-disclosure prompt stating that they can remotely wipe your device if you proceed with mobile setup.