How to to secure devices from being onboarded by another account

I have experinced a situation where our E500 device was cliamed by another account on the cnmaestro who we don't know. And i have noticed that all the packaging of Cambium devices show the Mac address and the serial  number outside the box and if what it takes to onboard a device is via serial numbers then anyone can cliam the device and prevent the real owners from claiming the device. I was sugguesting can you make the system to stop the claim of the device only when the onboarding is successful online on the cnMaestro, this will help the real own from runing up and down to find out who has claimed there device. I also sugguest for security purpose can you make the onborading  via Mac address and serial number?