That’s completely up to you and your team. I have some clients that did not want their employees to add apps and locked the devices so they could not add an Apple ID. I have other clients that let their employees add there Apple ID. One of the nice things about supervision is that, if you have an employee leave and lock their device, you can wipe and clear it remotely with Meraki.