If users are to use home PCs, they won’t want to enroll them in MDM. You still need to protect the apps and data that you provide to that PC. The solution is App Protection policies in Intune. You can use App protection policies to prevent company data from saving to the local storage of the device (see the image below). You can also restrict data movement to other apps that aren’t protected by App protection policies.