I understand your frustration, but do note that this is not necessarily a Windows issue. This is a security measure for Microsoft account. All other online services have similar measures, be it Google, iCloud, etc.I like Microsoft. I have primarily used Windows computers my entire life. This is one thing that really made me want to move entirely away from the platform. Luckily this is a replacement gaming pc from his old gaming pc that is breaking down. He is still able to use his old computer. If that were not so I would have taken more drastic measures. I could have wiped the PC and started over but we had just set everything up and transferred all of his old data. It took a while to get all the programs synced and all his data back where it is supposed to be. I just didn't want to do all that again.
So now it is just a waiting game. I wanted to ask for help but I also wanted to know if anyone else has had this problem? How common an issue is it? Seems like if it happened to a business or enterprise customer that Microsoft might fix this issue??
This will rarely happen in a business because in a managed system (eg. Microsoft 365 Business), the IT admin will certainly have admin access, and can reset any of the users' passwords remotely.
Take this as a lesson.
Whenever you have a computer, be it PC or Mac, create at least two accounts. First, create an admin (yours) account before any other accounts. Then add the rest afterwards (in this case, your son). That way, the machine have at least two accessible accounts. If your son's account is locked, you can access the system using your admin account. And take online accounts seriously. You can use password managers to keep important passwords.