Also something I discussed in the past. But when users have multiple devices from which one is prod devive and the other a test device? How to target that one device to test builds and policies?
All solutions come with pros and cons.