Is it legal for an MDM profile to perform malicious activities on Apple devices without user permission?

Some party began hacking into my accounts - including Apple accounts - as early as 09/2024. I have lost over 2 TB of data, bought a new phone, changed my phone # 4X and problems still persist. My carrier has been unable or unwilling to fix this issue which essentially is eSIM swapping (half of your Apple Account security is your phone #).

Apple has been unhelpful to date with one “Help” manager asking if I had a backup of Mac and as I was answering, she wiped my entire Mac (no permission was explicitly given nor why).

This is in conjunction with being black-listed (yes, there IS such a list) by AMA/local “physicians” for complaining about *their* discrimination. Also in conjunction with local sleep physician and/or CPAP Supplier who allowed the CPAP machine to, per. FCC, to illegally connect with a personal PC, disallowing all attempts at retrieving data and deleting all or most data (mostly CPAP Data) showing I’ve been using a dangerously operating machine for 8 months.

Ultimately, my question is whether this is legal (of course not right?) per. Apple policy and, if possible, how to remove the hidden MDM profile from my device(s) - I’m down to one barely operating iPhone 16..

[Re-Titled by Moderator]