ConnorL's answer is correct.
However, after disabling 'Disable modifying accounts' in Android Restrictions,
If you allow users to sign in with their personal account, they can purchase and download apps from the Play Store with their own account.
Of course, the DO's account will still be there and the device will still be in the Managed state.