[mappu]

The work phone VM here would still be MDM managed, have policies enforced, support remote lock/wipe, etc.

It's a really elegant solution IMO.