But not all mobileconfigs are benign. The same structure that eases provisioning can be abused: a cleverly named profile, delivered from an obscure host, can redirect DNS, present fake certificate chains, or silently enable a proxy. The line between convenience and control is thin; the file format makes it possible to trade autonomy for seamlessness.