By default when activating AFW, certain manufacturer system apps will show up in the work container even though they haven't been approved, or even exist in Google Play store. This can cause confusion for users when some of these provide duplicate features of admin approved apps, or can also be buggy.
Example is the Samsung Contacts and My Files apps
On flip side, also need ability to approve system apps to pass through to install on work.