Your endpoint management system has an identity problem

Endpoint management platforms sit at the intersection of identity and device control. A compromised administrator does not need to find a zero-day or write custom malware. They already have the keys to push configurations, wipe devices, and modify security policies across an entire fleet. This is not a theoretical risk. It is a documented pattern, and it has a name: