I’m not sure how the carriers can claim that it’s a security risk to be able to unlock your bootloader when it’s just as much of a security risk to hold back updates for ‘testing’. All the while your devices are open to exploits that are patched in updated versions of Android.