Here I talked about it: https://news.ycombinator.com/item?id=48275963

I bet you could use an MDM method on a regular Android, but I'm waiting for one that supports GrapheneOS. It's still a WIP https://discuss.grapheneos.org/d/13587-mdm-on-grapheneos/38