They do have MDM. But that doesn't necessarily stop people installing their own apps.