Hi Roberto
Many thanks for your reply. What you describe here "For byod, it really is a simple case of create Intune compliance, configuration and app policies, test until you’re happy then tell people to install company portal, and then do something with conditional access to enforce its use." was exactly what I planned to do. I queried the need to wipe a device four times with them and on each occasion was told that it was necessary.
I'm really unhappy with them as a company as nothing they do works correctly or is ever finished. Unfortunately it's not in my power to manage the contract, I'm just stuck with it. Back to management I go...
Many thanks for your help.