[35mm_guy]

You can use it fine without an Apple ID and you also get security updates for the installed OS (they do not require to be signed in)

The AppleID you use is used for the AppStore and iCloud (you can use different ones and to some extend multiple ones). Usually you create an additional AppleID for just buying/downloading sofware from the AppStore, just like you would do on Android or the Microsoft store. Same deal here. And use a different iCloud account, if you want to use any of it's offerings.

If an account is locked or disasbled you usually just reset the password as one of both is usually done on suspicious login attempts.

Never heard of what the OP descibes, unless it is a pre-owned device still associated with a different account or some enterprise management profile in installed. Both should not be the case if he just bought it from Apple directly.

In any case sounds more like an issue with the device itself than the AppleID. But I can just speculate here, which is ofc not helpful for the OP.

[philistine]

You're speculating a bit too much. The problem is with Allow Apple ID to reset your password. If this is enabled, Apple basically gets the ability to lock you out of your computer.

For this reason, I always leave it off, and recommend everybody does the same.

[nfoz]

In another light, automatic security updates also gives Apple the ability to lock you out of your computer.

[philistine]

Yeah, absolutely. But those can’t be gamed by a third-party to lock me out of my stuff.