Its better to lock to protect the company and insurer etc. Plus the programming belongs to the maintainer.
eg SIA lock all but do default on request. If the ex client doesnt want to pay for the default, boards are defaulted foc at the office.
Issues with gear is how they are programmed, passwords used in onvif, how systems are setup etc. Plus incoming company should always default to know it is programmed to their requirements with the client that may have changed. Had a conversation recently regarding this and there is the potential for liability issues for the outgoing company 'if' the incoming company can prove they didnt change xyz option.
Always better to default on leaving and incoming