That's what I think. Either no lock method, they're lying, or there's an unknown exploit or backdoor. Either way I'd be interested to know the outcome of this. As a Pixel user it's concerning.