It comes down to threat model. Random malware will be stopped more often by a newer build of LineageOS that has updated platform security patches. An unlocked bootloader is usually a concern only if a hacker gets physical access to your device and modifies the system partition. If an attacker has a remote exploit that can root your phone, you're screwed either way.
arirr
joined 2 years ago
Maybe I'll take a look later, but as far as I know, there haven't been any malware found in the wild that can be 1 done remotely and 2 are stopped by a locked bootloader. Even if there is, is that riskier than running a few YEARS of security patches out of date.