Nine can do applevel or security for exchange so you don‘t have to give your company control over your phone. Bonus points if you sandbox it in work profile via Island.

Needs more mister bean ;)