I wouldn’t do this. Sandbox sounds good, but that kind of access is just to shady to want anywhere near my device.

I’ve never had to download an app for work. But I wouldn’t deal with an MDM at all without a gun pointed at me.