I have the Microsoft Authenticator installed on my iPhone but it doesn't require device management for remote wiping like traditional Exchange/O365 email on the phone does. It's possible that can be set at the organization level but I'm not sure -- so while it would be annoying to have to install that single work app on your phone I don't believe it would cause any kind of remote administration capability.