im using graphene os with an MDM with the option to wipe the cell phone as long as the phone has a connexion to the internet if ever my phone falls into the wrong hards.
With the current way that it is it doesnt really come useful as the person could simply close phone off and waste such a valuable secutity feature of the service im paying for.
I also set my phone to auto reboot to every 4 hours so having the data at rest falls into the second line of defence.
My particular issue is that since i dont use any sim card and use a personal router for security reasons i wouldve maybe love to have an option for the phone to stay on so i can securely wipe it in the minutes after i lose my hands on it.
if ever that case would happen.
now with the current settings my threat model could simply turn phone off and try and hack into the phone via traditional ways (cellebrite or gray key) or other newer methods that havent been made public yet.
i just feel for users who are using grapheneOs under an MDM it makes it harder to actually use the services to wipe it as its unconnected to internet pretty quickly.