This article goes into more detail about how these new measures will actually work compared to the blog post earlier this year from Google. Namely:
- Enabling the OEM unlocking setting will no longer prevent FRP from activating.
- Bypassing the setup wizard will no longer deactivate FRP. FRP restrictions will apply until you verify ownership of the device by signing in.
- Adding a new Google account is blocked.
- Setting a lock screen PIN or password is blocked.
- Installing new apps is blocked.
This could still be bypassed by flashing a new OS that deliberately messes up the userdata wipe-persisting secrets. Well idk if there's a way to prevent that, but I guess really needy and tech-savvy people could recover lost devices that way