What if you didn't pay for it? What if your company paid for it, and they want to ensure that the phone is being used within the policies etc. that apply to devices with access to business systems for compliance and liability reasons. ...
There won't be any final info until it is too late. That's the problem. They can always tighten the security framework in a future update. There are plenty of examples of other corporations doing this. It's a question of trust. They don't trust me, so why should I trust them?