Have corporate buy you a research Air that isn’t on the MDM.
If corporate wants they can still accept/trust a machine with partially disabled SIP on the MDM
If corporate wants they can still accept/trust a machine with partially disabled SIP on the MDM