Prevent unauthorized image flashing
You may only make oem lock, but if anybody really need to flash something - he can do unlock  again (with removing anything from device).

And one old rule: if anybody has physical access to device - software protection will not help.