But only on macOS hardware. All other devices have their boot loader locked.
I wonder (and can not prove, but remember this concern at Qualcomm and Apple back around then) if the issue was forced by Cingular Wireless originally.
In particular, iOS devices were dependent on carrier cooperation, and Cingular may have required only vetted software builds to connect to their network.