[jasoneckert]

In this case, it's for enterprise MDM and MDR software agents that have device-level trust after the device has been enrolled (e.g., Apple Business Manager, Microsoft Intune, Kandji, Jamf).

[paradox460]

I would say the line between malware and most mdm packages is up for debate