Pixel is the only model I know of that the bootloader can be relocked after writing the OS. That means other phones will be vulnerable if someone has physical access to your device.