This article goes into more detail about how these new measures will actually work compared to the blog post earlier this year from Google. Namely:
- Enabling the OEM unlocking setting will no longer prevent FRP from activating.
- Bypassing the setup wizard will no longer deactivate FRP. FRP restrictions will apply until you verify ownership of the device by signing in.
- Adding a new Google account is blocked.
- Setting a lock screen PIN or password is blocked.
- Installing new apps is blocked.
That makes a lot of sense. I like the GrapheneOS approach to these things.
I hope they can figure something out that’ll be user friendly that’s also recoverable if your forget the password. Wouldn’t want to put myself in a “lost my key, guess I can never sell my phone now” situation.