Mitigate unlocked boot loader

This post has a link to reddit where the topic (incl. risks of an unlocked bootloader) is explained:

There’s many devices (with eOS community builds) that do not allow relocking the bootloader. (As a sidenote: for my own current device I consider the risk acceptable.)