> The agent is read-only and has no capability to wipe a device, it is a read-only agent that we have security validated with a third party.

And you can change that over night, without notice to anyone not actively monitoring your platform for such messages.

Why is that your policy.

You expect a high level of trust. And still you engage in dark anti-patterns that nukes any kind of trust for anyone who know how to read.