In this blog posts scenario, the user has the device and the receipt, but the device is locked to another iCloud account. Is that sufficient here?

What stops me from selling my laptop anonymously, robbing it from the person I sold it to, then having Apple unlock it?

I know it seems a weird case, but there are some pretty wild and convoluted scams out there, and this is pretty tame in comparison.