An MDM report shows that a user's company cell phone has unauthorized applications installed. The device has recently checked into the MDM server, and the company still has access to remote wipe the d

Obtaining root access (rooting on Android or jailbreaking on iOS) grants users elevated privileges, allowing them to bypass device security, install unauthorized applications, and modify system settings that would otherwise be controlled by MDM policies. This explains how unauthorized apps could be present despite MDM oversight.

Upgrading the OS typically involves vendor-approved updates and does not inherently enable the installation of unauthorized applications or bypass MDM controls.

Installing a VPN client secures network traffic but does not typically bypass device security to allow unauthorized app installation.

If the user had uninstalled the MDM software, the device would likely no longer check into the MDM server, and the company would lose the ability to remotely wipe it.