Regarding the security issues, this is a problem that is impossible to solve with current systems (at least the ones I know about). You have two security domains that you need to keep completely separate except that you have full access to both and you probably want to integrate the data (e.g. you don't want to have two completely separate calendars that you can't look at at the same time).
Add to that the fact that access to one of those domains (e.g. corporate data) needs to be revocable, and the revoking party needs to be confident that you aren't going to disable the feature by logging into the device as an administrative user and toggling a flag, and then lose the device in a Starbucks.
Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds