[m-p-3]

If executed properly, those two seemingly opposed features could be achieved and make more people happy.

Make it possible to unlock iOS ability to sideload apps, either through a unique code, a security certificate, or a simple toggle and allows businesses to lock down (but not remotely enable) this ability using their MDM.

Of course, put the usual disclaimer that enabling this feature could weaken the device security, and don't simply enable it because an app or a website told you so.