[croemer]

The MDM admin can do whatever the user can do (or more), sure. So yes the MDM admin can potentially read/hear/see stuff, but everyone knows that. That's not a vulnerability, that's by design.

The compromise is only wrt the admin. Are you claiming the admin itself is compromised? What's the evidence for that?