On macOS, running nvram -p or using specialized swift scripts found on GitHub can tell an admin if the firmware-level lock is active before the user hands back the laptop. The Reality of "Activation Lock Bypass" Tools on GitHub

While Activation Lock and GitHub may seem unrelated at first glance, they do intersect in certain areas. For instance: