Advice about bootloader unlock, root

[hirnsushi]

It depends, @CransNeighbour did a great writeup here:

Is there any benefit to disabling the option “OEM unlocking” again?

I do not own a FP3, so I cannot talk about the differences, but security wise there are a few things to consider: Locked bootloader and flag not set (i.e. OEM unlocking disabled) The security of your data and everything else depends on the quality of your password. A potential attacker does not have access to your data and if they were to factory reset your device they would not be able to use it, since factory reset protection (FRP) is in place. This requires the input of the credentials o…

But that only applies to stock FPOS, because Factory Reset Protection is tied to a Google account.

CalyxOS for example disables OEM unlocking after the first successful boot automatically, according to one of the devs…

Also when CalyxOS is locked we automatically set OEM unlocking to off aka unlock ability to 0

But it only happens after a successful boot and thus is safe

…but I have no idea what’s the benefit of disabling OEM unlocking in a custom ROM
(Other than making disaster recovery harder)

Either way, since IMEIs can be blocklisted, a stolen phone is probably not that useful to a thief anyway.
The data on it is probably more valuable and that is encrypted.
Locked or unlocked bootloader gets more interesting if you deal with adversaries that want to modify your device, for example to spy on you. But most people probably don’t live under a threat level where that becomes relevant.