Is its bootloader unlockable, or locked to Graphene? Graphene seems to be trading freedom for 'security'.

Refuse it, ask for a chip card-based solution, which is very feasible. EU will require banks not to ask for smartphones with the PSR.

Too often I see desktops where the only two graphical apps are some ultralight terminal and Mozilla. Why do they want to suffer?

Greed.

What? Droidian works perfectly (Moto ThinkPhone)!