I definitely don't want strangers viewing my contacts. Even being able to view my emergency medical card is too much. Lost phone should be put into Lost Mode where you can put a message with a phone number to aid return of the device.
The issue here is you keep creating AppleIDs. You should have only one or two and use them on your respective personal and work devices. With 2FA you really need to have more than one trusted device or you can easily lose access and have to go through the account recovery process which can take a while.
Apple has a very generous return policy. There are so many refurb Mac pros due to return for incompatible peripherals or whatever reason it was returned.
Real admins run linux anyways and should have no problem implementing common services.
Supporting every little mom and pop that doesn't understand DNS, ports, file permissions or network users, which is generally looking for the cheapest solution will be be trying to integrate the lowest of the low end equipment and may cause even more problems beyond the control of Apple to be able to reliably support. What most small business need are just a NAS with network printer support.