@HisDudeness
installing iodéOS via flash-all.bat/flash-all.sh has proven to be a safe method. At the end of the installatin process, relocking the bootloader is offered. This should be run before the first reboot when it is ensured that the system is ready for it (fastboot flashing get_unlock_ability).
Note: Subsequent re-locking doesn’t always work for me.
iode-7.4-20260403-FP5-fastboot.zip
security-patch-level=2026-03-01