My Pixel 2 says its bootloader is critical unlocked, but also locked

It says this whether or not OEM unlock is toggled on in DevOptions. Can anyone help me understand this discrepancy?