My ritual for family machine setup is locate wifi kill switch-> if not available, announce wireless going down-> kill network->setup to local account->reenable network
It's patently infuriating. Throw in where I've had family members set up Microsoft accounts with only 1 form of auth (Phone number), change that, them get locked out of their Microsft account for a month because of Microsoft's daft policies. Though I didn't set up that machine. It boggles the mind that Microsoft's default flow would run the risk of such an outcome.