It can run PostmarketOS as well which I might play with at some point.
The 6t allows bootloader locking if I sign it with my own keys, but I haven't tried that yet.
A shame it is less supported on newer devices, but these older devices meet my needs perfectly anyway, so I'm not too worried. People buying a new $800 phone every year are just wasting their disposable income IMO.