Well they are good for security, but they don't have to be bad. Pixels are "locked" until you unlock it and install GrapheneOS and then re-lock it to prevent unauthorized access, that's preferable to both "no lock" and "lock you don't control" imo.

(This only applies to carrier unlocked pixels you buy elsewhere of course, if you buy it from a telcom company they lock it down, which is bad).