I am a bit fuzzy on what aspects of MDM are being discussed. MDM stands for mobile device management, so Qubes on a desktop would not seem applicable.
(note: I do understand the part where often companies can implement brittle policies, sometimes with a lack of understanding of the topics.)
Are we talking centralized/remote configuration in general? (For example, one well known example being windows group policy)
Possibly related is the recent qubes-ansible.
While it does not address remote administration, it tries to provide centralized administration of the local system from a MgmtVM qube. Link here:
(Note: If a centralized system could be given access to MgmtVM in a secure way, there would be the potential for centralized configuration.)