According to the PRO¹-x FAQ
Why does LOS come with an unlocked bootloader without locked bootloader option?
From the documentation I read, it's up to the ORM to decide on what img can be used to lock the bootloader. Given that F(x)tec is the OEM, you should be able to ship with a locked bootloader and LOS which can allow having root capabilities and a locked bootloader at the same time.... Which can allow full freedom and SafetyNet attestation to pass (if the user installs SafetyNet by himself, ofc)!
Am I missing something here?
Sources:
https://source.android.com/d