Using androids without the secure container is a big risk since users can download apps from any market place and you can't confirm that all android devices utilize encryption or fully support activesync policies. At a bare minimum I you should use the AV (which comes free with EMM), you also may want to limit it to approved models that fully support encryption and activesync policies.
Personally I just tell people that they have an option between an iPhone or a secure container. The secure container gets regular updates and is getting better.
Thx a lot for your fast response and well thought input M. Kordell