Wouldn't it be fairly straightforward to lock down a particular device with the unlocking step tied to another phone ? Like let's say I buy a phone for my kid and I lock it down using my iphone. For installing any app on my kids phone they require some form of authentication from my device. With more people in the loop I feel social engineering becomes more difficult