MDM locked Pixel 4 XL with an unlocked bootloader

Hello everyone!

Recently I got my hands on a very strange Pixel 4 XL.

Everything started with my friend buying it second-hand from some shop on OLX. He wanted to update from Android 11 to Android 13 but the phone won't see any update (red flag #1), and besides that, he couldn't link his credit card to Google Pay (red flag #2).

I decided to sideload the OTA via recovery, but I noticed that the bootloader was already unlocked. I didn't think much of it until I finished flashing the update and factory reset it. It was on MDM lock.

I couldn't comprehend that it had an unlocked bootloader and an MDM lock together. The phone was perfectly working and showing no sign of a bypassed lock or something like that.

For now, I left it on a multiuser bypass and flashed Magisk to fix Play Integrity. The phone's working fine besides that now I need to switch users every reboot.

Now I'm interested in two things: how the bootloader was unlocked, and how they managed to bypass the MDM.

Before you ask it: the seller is aggressive and tries to tell me that "this is normal", and of course doesn't want to provide moneyback, though he didn't specify anywhere in the listing that this is a soft-unlocked phone.

Screenshots: https://imgur.com/a/jFCL8zl