Device profiles can also wipe a phone after failed attempts (among many other things). The most common way for this is signing into your work’s 365 and accepting to add the device. This is so company data is automatically or remotely wiped should anything go wrong.