[aragilar]

The issue is things that would make sense in a workplace setting (which should be on work devices, but that ship has sailed), have real social and privacy issues (see MDMs being used as stalkerware). I worked on an app which really did need as much sensor data as possible (field notebooks for academics), but you really wouldn't want to give that level of access without oversight. The more information you can collect without needing some kind of review (which I totally agree is rarely sufficient), the more this is an issue. Ideally there are different levels (e.g. business, personal, and locked down), and you need to do the setup in person so as to reduce harm.