Why does developers managers think we want this!? It’s awful and distracting.

I never really understood the need for that strickt controll of the hardware… Who cares if Linux is sideloaded or if students unenroll. Imho I think if you need that strickt controll you are bound to get so many unnesseary issues down the line. Instead let student 6se what ever the fuck they want and for security just make sure they WiFi/ethernet is secure and locked down and any services the students need are behind a secure 2fa login. Treat any device as untrusted is more healthy for your security in the long run imo. If students need special software that they can’t run on their own machines you can lend them a machine for that specific task for a specific time. Problem solved.