Well, for this specific issue, it was an executive branch decision that allowed, and now doesn't allow unlocking. Laws are often just "hey, executive, do this", and the executive figures it out (see also: EPA, FTC and lots more).