When they buy the phone the default option is unrestricted. The default should be restricted, including when resetting. Including when setting up other accounts. This is a solved problem, but it would cost big tech billions in lost revenue from malicious markets.