iPhone backups may reside on a computer that is outside of IT Policy (Home PC) and therefore doesn't have any Corporate IT protections on it. If this home PC was stolen or hacked, then the iPhone backup data is vulnerable as well.
Considering that some iPhones support local encryption, and there are ways to prevent what devices can connect via Activesync, does it make sense to enforce that all backups of the device are encrypted?
How would you go about deploying this policy and reporting on compliance? As far as I know, the Apple deployment tool may help, but may not directly help in reporting.