It’s so that someone else can’t unlock your bootloader and install malware. Like if you’re entering a country and they say “please unlock your phone” and they take it, they could unlock and replace the bootloader without you being able to tell.