being able to lock your bootloader should be a bare minimum requirement. what’s the point of pushing security updates if all that can be bypassed by tampering with the firmware?

OEMs are just too lazy to spend the extra bucks on the cryptography chips and they don’t let you relock the bootloader because they are conservative in their approach to security