The user can wipe a device via the webclient.
Login and then select "Device list" in the navigation bar to the left.
From here you can wipe the device, by blocking it.
Hover the cursor over the device Icon and the Block option will appear.
This means admins cannot login and wipe devices for users.