Enrolled via DEP: Yes
means that the device is likely enrolled in Apple Business Manager aka DEP. DEP enrolled devices automatically get user-approved MDM
.
Note: Enrolled via DEP: Yes
devices can still have broken MDM profiles, but are more complicated to fix as the user won’t be able to remote the broken profile themselves.