Relocking the bootloader doesn't imply that verified boot is enabled or that that it's not broken for alternate OSes, as is the case for the devices you mentioned.

https://twitter.com/GrapheneOS/status/1423665850725408771