Indeed the Murena shop preorder page for the CMF 1 mentions an unlocked bootloader and states that this can be an issue if an attacker gains physical access to your phone.
If this scenario applies to you, you should clearly consider another phone model for now.