They would likely restrict play store installs, and currently there is no way to side-load Android apps; the normal Android developer mode options does not allow side-loading anyway, much less an enterprise managed device. I don't think there's any way to "restrict" dev mode, necessarily... anyone can put any Chromebook into dev mode, and lose all data that was on it in the process.