What are the primary differences between mandatory access controls (MAC) and non-discretionary access controls?

Non-discretionary access controls tend to work better in organizations that experience high turnover because access is not associated with the subject.

If so, does that imply that mandatory access controls are more secure?