Now, there's things that are left unanswered for now. Can you uninstall Play Services with an already used account? Can you run adb somehow before the phone boots up for the first time, so you can make sure you have a 100% clean Android session? Can you automate the deletion every time you add an account, particularly with guest accounts? Is there any hidden backdoor I have yet to notice?
This is still amazing though, mind you
There's also another challenge: if you uninstall every input method provided by the system, you won't be able to type your password in an encrypted phone unless ADB is enabled.
Yeah, I don't know how to feel about this one.
So, you have to put the phone in contact with an NFC device (like another phone!) in order to #provision a device owner. However, you still need to be able to somehow install the device owner APK... how can you do that if you don't even have ADB...?
Actually, that only applies with safe mode, so I think we're safe here