No, a device cannot be unenrolled by a user (unless it is enrolled as Work Profile device).
Note: It is recommended to block Factory Reset on a device.