I guess the last smartphone where the IMEI was truly uneditable was Nokia 808 PureView. Although I guess some workarounds could be put even there, but again, "security though obscurity" and hardware boxes.