The first link is about a flaw that allowed the OS to be replaced without the user knowing. It's the opposite of "pretty damn secure".

And they had other security issues, both with their phones and servers. I'm sure you can find more info with a quick search.

OnePlus makes good phones, but this thread is about Android security... and they don't have the best record.