A. If you want 2fa to unlock a phone fuck off B. One has to opt in to iCloud. (It's way to fucking motivated and absolutely a forced thing in my opinion though)
If you can't download an app without being signed into an account... You paved the way for Microsoft. Literally were the worst of the worst and made it so. Even the Microsoft store allowed $0 purchase without sign in for years after if not possibly still today. (I don't use them).
That said... Security testing anything should tell you the Apple/Google/Microsoft system is all wayyyy more secure using 2FA and activation locks we all hate because theft is a thing. We shouldn't need an original proof of purchase to unlock a device, yet we do because social engineering makes it that way.