Help with IOS setup

I have no experience with Intune's MAM, but we have no issues with WS1 here.
With iOS BYOD devices, there are very few options for executing device-wide actions. Supervised mode is required for many commands and restrictions, which is not possible for BYOD devices.
Business apps for iOS should always be "purchased" and distributed via VPP. As soon as the enrollment is canceled, a VPP-managed app should actually be deleted. There may be an option in Intune for the iOS app to remove the app when management is canceled.

To stay a bit on the topic of Android:
The Work Profile on Android is simply better, as all work-related data is removed when BYOD devices are unrolled and no potentially work-related data remains on the device, as is the case here. 😄