> devices that had a work managed profile on them could still be completely wiped

No, personally-owned devices with a work profile cannot be wiped remotely using mdm. But company-owned with our without personal profile can be wiped by a mdm.