Hello, Bigdogburr !
Thank you for this information. Our team has started a trial run of factory reset protection via our EMM, but we are not terribly thrilled about it's implementation. Essentially, the FRP account is an extra Google account that is installed onto a device at time of enrollment. In order for a user to recover from FRP, the user has to input a username and password associated with that FRP account. If we were to implement this through our enterprise, we would be sharing a user account on all 20,000 of the devices in our environment. What happens if this account/these accounts become compromised? We are depending on our help desk to share these credentials with our user community to bypass FRP, and then reliant upon the user to not change the password to the account or do some other nefarious or ill-informed thing using those credentials. It seems like a security nightmare waiting to happen...