The end result is the same though. First phone unlock is the one a bad actor can’t get through.

GrapheneOS is the easiest ROM install bar none. Get the en browser (needs to be chrome-based) to the install url, hook the phone cable, and let it run. It’s super straightforward. It’s not rooting though, you don’t get root access by default.

GrapheneOS also has this. Not sure stock android includes it.