Suppose there's a macOS exploit found that makes use of the unlocked bootloader. Are you certain Apple would actually patch it, and not just lock the bootloader? Sony famously did that to the PS3.