You are correct that privacy is an issue buying from Google. You can try different retailers and see whether the bootloader can be unlocked. If not, return it.
It would be good to know if there's a specific model number/code that indicates OEM unlocked. Apparently if it has zero carrier branding and/or says international it should be good. But you're right, return it otherwise
reply