nologo Wait, carriers can disable OEM unlocking? How does this even work?
Well yes, that's what GrapheneOS references (https://grapheneos.org/faq#recommended-devices)
Devices sold in partnership with specific carriers may be locked by the carrier, which will prevent installing GrapheneOS. This is primarily an issue with US carriers and isn't common elsewhere in the world. To avoid this, either don't buy a carrier device, or make sure it can be unlocked
Carrier-lock only means you can't use another carrier's network via your e/SIM, it is separate from the "OEM unlock" required to install GrapheneOS.
Do they have an exclusive contract with the OEM in such cases?
I don't know the details, but I think they just tell the OEM something like "we want to order phones from you at scale to resell to our customers, but make it so our team can enable and disable (make it greyed-out or not) on-demand the toggle OEM Unlock for any phone we sell", and the OEM says yes because it's a lot of money at stake.