[Samsung Galaxy Note 8 Questions and Answers] M132:
Hello after a short break, I just received my Note8! No wonder why they codenamed it greatlte, it indeed is great, not just in terms of size :D

Anyway, first thing I wanted to do after turning on the device was rooting, so I could unleash it full potential. I went through setup leaving options mostly default, so no cellular data (I didn't even have any SIM inserted) and no Wi-Fi. That also means I haven't logged into any Samsung/Google account. All I've done except clicking next, was disabling options that could be used to track me, so no marketing stuff, no remote lock/wipe and no remote control. I only accepted first EULA (that first option on the screen, which had 4 of them), and unchecked everything on the last screen (except Secure Folder and that first thing I don't really remember). Enable OEM Unlock was here from the start! After enabling it, I enabled Wi-Fi to use some apps. Knox Customization app has fired up, forcing me to register the device and accept all the agreements, so did it. Enable OEM Unlock was still there, enabled.

So no waiting now, after flashing it'd probably disappear for a week, I will have some time to wait then, right? I booted into download mode, took a photo of it, so I can look later and say "This phone was under warranty once" :laugh:. I flashed TWRP, and rebooted straight into recovery. After 2 hours of backing up, one for internal TWRP backup, one for backup done though "adb shell cat /dev/sda > backup.img", I finally wiped data using Format Data button, rebooted into recovery again, flashed no-verity-opt-encrypt-6.0.zip, rebooted into recovery again, and flashed Magisk Beta v14.3 (damn, they just updated it to v14.5! I shouldn't hurry that much :laugh:). After all that, it was time to reboot into system, and pray for it to work.

It booted as usual, greeted me with the same setup, again no cellular data or Wi-Fi, no remote lock and stuff. After setup, Knox Customization told me something like "This device has been already registered in some organization" and forced me to connect to the Internet, so I've done that. After that, I received a notification about modifications done to the OS, telling me to reboot so these will be automatically undone. I thought then, "goodbye OEM Unlock, no rebooting for week...". I enabled developer settings, and guess what? OEM UNLOCK WAS STILL THERE, ENABLED! NO CUSTOM ROMS, JUST TWRP, NO-VERITY AND MAGISK! :victory: I couldn't believe, I've rebooted the phone and what? Magisk's still there, along with enabled OEM Unlock! The Secure Folder is also there, even though varranty void says 1 now, but I've never used it, so I can't tell if it works.

VaultKeeper on my phone says, that RemoteLockControl vault is empty each time I enter developer settings. So, I'm either lucky, or this annoying lock is there just to protect users, who enabled anti-theft features! Once your phone is stolen, first thing a smart thief would to is a data wipe, to get rid of screen lock, and a custom ROM flash, to get rid of Knox registration data. That's where OEM Lock, and jail kick in! They block thief for 7 days, and they also require, to connect the phone to the Internet. I bet everyone would realize, that their phone is missing in less than 7 days, and remotely block and localize it, before the thief fully owns it with custom ROM.

I'm attaching the logcat of moment right after pressing developer settings, photo of download mode before a flash, and after a flash. Notice, there's no word about RMM STATE, which looks related to the jail. Go ahead, and disable anti-theft, if you want stable OEM unlock! Happy flashing! :)

Edit: SecurityLogAgent is spamming me with notifications about modifications all the time, everytime I reboot the phone though TWRP, Magisk, and OEM unlock are still there, so I guess it can be safely ignored.

Edit 2: SecurityLogAgent can be safely disabled by running "pm disable com.samsung.android.securitylogagent", either through ADB or using local terminal emulator as root ;)