I got hit by this same issue. We had a few spare phones at work in a draw and I wanted to give them to friends in need of a phone. Had permission from the company but no one knew who owned them or what the password was. I did the manual factory reset from the recovery but was hit by this "security" feature.

I eventually managed to track down the original owner and had them unlock the devices. If I hadn't, these phones would be ewaste.

What bothers me is the solution is simple, when a manual factory reset is done, have the phone ping google and start a 1 week countdown. Google can then email the original owner and ask if they have had their phone stolen. If they reply yes then the phone is locked. If they reply no or have no response then the phone unlocks.