@Sa Yang Thanks for posting in our Q&A.
Based on my understanding, it is needed to install the extension.
I have done a lot of research. I find that someone has given some information about it. Peter has said that even the device is compliant or domain joined, the device will be blocked when not using the Windows 10 Accounts extension. Please refer to his blog.
Note: Non-Microsoft link, just for the reference.
Hope it will help.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.