Most MDM persists a wipe unless they’re de-enrolled by serial or other unique identifier (e.g. computrace, Windows Autopilot although it’s a bit weird, apple too I think)

Computrace/absolute is a literal rootkit