Why aren't US gov owned devices subject to a device management policy? If they are Android or iOS, it's trivial to apply an MDM policy to them to control what can/can't be installed, to mandate being patched and up to date before accessing gov resources like email etc. If they're Windows or Mac, similar with InTune etc. How the hell aren't they already like this? Every large company I've worked with over the past decade has been doing this for years...!