One of my students today asked a question…

"i know BES can enforce a device to be encrypted or have the mail on it encrypted, can EAS do that?"

Sure seems like it – I found this portion of the EAS policy..

Device encryption enabled

setting enables encryption on the device. Not all devices can enforce
encryption. For more information, see the device and mobile operating
system documentation.

Taken from this link..

Understanding Exchange ActiveSync Mailbox Policies