Hahahah when I worked at the hospital my director's answer to any of that was "Exchange is our MDM" despite me pushing for it, so I was stuck with the receipts regardless.

... My personal stuff is enrolled into my own personal Jamf instance and because I went through a bunch of motions with Apple Business my personal phones and Macs are all DEP locked ;)

I would love to go this route but the entry seems blocked unless you have a business with a DUNS number. Am I right in that assumption?

Hah, no.

It's mind-bogglingly easy to bypass MDM/DEP on even a T2-enabled/Apple Silicon MacBook.

Like three minutes, and not overly complex. Without spelling it out here, null route three DNS entries, install macOS Monterey, edit /etc/hosts similarly, and then upgrade to Sonoma. You can even remove the null routing after (it's only needed to bypass network calls in the installer).

Nothing broken, no errors, 100% DEP-escaped.

I suspect that the only thing you can't do at that point is reset to the OOB experience for selling it.

Interesting. Nothing similar for iPads and iPhones? Except jailbreak.