same here on M4 MacBook Pro

Hello AJPinto, thank you for reply.    It may well be that I have misunderstood.   To clarify my understanding;I understand that activation lock will prevent someone from wiping the device and setting up as they (in case stolen maybe) unless they have the credentials of the apple account that was used to activate 'Find My' - or in the case an MDM - the MDM will activate and this wiping in case stolen cannot happen.In this case I understood that a user should not/cannot do it - otherwise it is locked to their account.  - which means when they leave the company - I then have to go long route to apple and ask them to remove after providing proof of purchase etc etc.  I understood - and this part may be where I had not understood correctly - that the MDM will activate the activation lock so it is locked to my organisation.   Your answer suggests that the device will still be locked and cannot be wiped because the MDM is in place and the device is supervised?   Did I understand you correctly?There is nothing you can to do prevent a device from being wiped. Enabling things like the EFI Password (for Intel Macs) or Recovery Lock Password (for Apple Silicon Macs) will make the devices harder to wipe, but not impossible. Also disable Erase All Contents and Settings in MacOS Settings with a Configuration Profile. However, DFU restore of a Mac will remove the Recovery Lock Password allowing the user to wipe the OS and reinstall macOS. Where I think you may be confused with Activation Lock.MacOS Activation is where MDM comes in. If you have your devices in Apple Business Manager, and targeting a MDM like Jamf, you can configure the MDM to have Automated Device Enrollment enabled. When macOS tries to activate APNS will check or several things like Activation Lock or MDM Enrollment Profiles. If the device is in ABM, redirected to Jamf, and Jamf has a Prestage configured scoped to the device, then the user MUST enroll the device in Jamf to clear macOS Activation. If you have credentials required to enroll, and the user does not have the credentials then the device is stuck. Apple has a fairly robust set of training documentation for device deployment and management, these sections go in to device enrollment and may clear some confusion up.https://it-training.apple.com/tutorials/apt-deployment/#enabling-automated-device-enrollmenthttps://it-training.apple.com/tutorials/apt-deployment/#understanding-device-and-user-enrollment