hmm

The big question will be whether the phones are rooted/jailbroken. That would open the door to pretty much anything.

Otherwise, with enterprise mode, it sounds pretty easy to block the access to all apps except for one.