They weren't, not by design. A lot of them just have bootloader exploits, and even back when WP was still supported, they didn't really bother to fix it. They're an ideal target for Windows 11, as all the hardware components already have drivers for Windows and bootloaders available.