Comment by dmitrygr

The official answer is that with no bootloader locking, there is no way to prevent an evil maid attack (replace OS with a replica that logs your passwords, exfiltrate them later). The real reasons are anyone's best guess...