If the bootloader cannot be unlocked, relocked, or doesn't provide timely updates to firmware/hardware, it's hostile.

The rest is not (might be lazy, insecure or just silly but not hostile)

It's surprising some vendors still don't support unlocking and/or relocking.