That's interesting. I didn't know about lockdown mode. Noting!
> I've installed hosted-profiles (.mobileconfig) files without factory-reset, curious why didn't you go for that route?
Afaik the only way to disable the App Store is to go through this schlep of a factory reset and having Configurator prepare the phone for 'supervision'.