Some clients perform some of those operations in a sandbox. Eg. Nine for Android let's you choose when you set up an account whether a remote wipe command should just wipe that account's local mailbox, or your whole device.