This is not issue of secure erase but the way nokia account works.
It is same with other nokia phones, symbian and even some Ashas.

Nokia account is tied to your number. So if you put SIM while flashing and it switches on, it connects to nokia servers and knows which account that number is associated. Hence it asks you to enter password of that account.
So it is not that some data was left after secure flashing.