I find the behavior as implemented entirely unacceptable. My work has Google apps and that caused a Chromebook I was using to immediately jump to managed by the company as soon as I logged in with my work account despite having no intranet/etc and no one intentionally configuring anything. It would never allow me to do regular processes for the chromebook's management even after full resets.

The whole point of a restricted boot environment is to have multi user with proper separation where one user can't accidentally compromise the system. If an org is still unhappy mixing with other accounts or being on user provided hardware they should be able to block that. Stealing hardware and implementing anti-theft rules that should apply to verified org provided hardware on first login is a crime.

Years ago, I debated Chromebooks as a solution for older relatives. Now I shudder to think what would have happened if I had and one of their nieces/nephews or grandkids had something to show them from school.

Having seen the absolutely atrocious screens in the school furnished chromebooks I half believe Vtech put higher res screens in their 90's kids laptops.