I proposed a very reasonable solution that gives the user control AND responsibility of their own device. If you don't want the responibility (and the control) then stick with your manufacturer's locked bootloader and never touch it.
I don't know about you but I would really like if my work phone had a company-set bootloader lock just like my work laptop has a company-set BIOS lock in case someone steals it or gets lost. There are plenty of professional and personal reasons why my solution would make a lot of sense in my opinion.