> Restricting access to corporate environments from trusted machines is trivial using any form of MDM.

Until somebody pulls out their personal cell phone, and takes a photo of a screen containing highly confidential data, to then send it to someone else, because, dang it, they had to get something done NOW and it seemed very convenient.

No security measure is 100% effective nor 100% moron proof, but in many companies that would be a fireable offense, which gets you pretty far.

Some consumer electronics companies have security guards enforcing that no cellphone gets on premises. If you want security you can get security, but is the price worth paying? All depends on the cost of a breach. Given that last pass still has customers maybe they estimated their costs just right ;) that cannot be said of some certificate authorities..