I think the key thing to check is that the device is no longer shown on the previous owner's iCloud account when checking through the website. It's Apple's servers that you have to ensure no longer hold any association between that machine and an iCloud account that you don't have the credentials for, because the activation lock that survives a complete erase of the machine is implemented server-side.