[rezonant]

What about when the hardware is legitimately sold and reset and a new Apple ID starts using it?

[chongli]

You have to de-register the device with Apple when you sell it. Otherwise you retain the ability to remote wipe and brick the device and the buyer has no recourse.

After you de-register it the buyer can register it with Apple under their Apple ID.