When our third-party recycle company try to reset the UEFI/DFCI management on our decommissioned Surface Laptops using the same procedure (documented here https://learn.microsoft.com/en-us/surface/surface-manage-dfci-guide#removing-dfci-management) we have been using for years, they are now seeing the below. Affected devices confirmed removed from Intune/Autopilot etc.

ps - why on Microsoft hardware is the UEFI so limited in what you can see? With other vendors you can see/configure all the hardware...