Comment by easyKL

Locking the bootloader is important as it enables full verified boot https://grapheneos.org/install/cli#locking-the-bootloader