MDM Work Portal Settings – Android – iOS

Hello Team,

Please help me with some questions I have regarding the implementation of my MDM policy on Android and iOS mobile devices. When installing these applications, the following questions arise:

Why is "location" required, and why is its activation necessary?
It requests permission to access the phone's storage — why is this needed?
How is web browsing managed or controlled?
Defender asks to activate a VPN — I would like to understand why this is necessary.
How does Defender classify the severity level as high, medium, or low, and how is this used to determine whether a device is considered compliant?