It would be great if there was a way through the web interface to check a box to REQUIRE all mobile apps to set up a PIN or biometrics / FaceID. Too many times have I installed the app on a new device and the app has not asked for PIN/biometrics, and the absence of the requirement is not a good reminder to create the requirement.

Bonus points if that feature/policy requires re-authentication or escalation of privileges in order to set up the biometrics, or forcefully logs the user out on the device if they don't set up the feature.

This could be an opt-in feature, so existing users are not inconvenienced.