No alternative, you can't realistically fully control everything everyone does on every device in their possession. It was job security for useless control freaks, the products never should have existed.
I absolutely have, which is how I know what I said is true. I know who gets blamed in that scenario too. The point of that job is to be the scapegoat when things go horribly wrong. And they will, because you can't realistically ever control a device in someone else's possession. The application level is where all expectations of control and liability should end.
