When I came in to my current company last year, the only way to get work email was by enrolling your phone in our "company portal" which was based on MS's Intune, part of their 365 offering, which by the way is horrible. There was no IT director and the lawyer and CFO who drove the plan had draconian rules, so bad that only a few people ever enrolled, and those who did regretted it, as their phones would be wiped several times as unqualified people "poked around" in the system. Exchange and outlook alone can handle email data safely with remote wipe of company data without total MDM and device 0wnership. I changed to that immediately, and in the past year we've needed to wipe only two people's phones, and it went without a hitch. MD is a tool that frequently is more than required for the situation.