>In theory it's nice, in practice are there phones that you can root without leaving the bootloader in a vulnerable state?
I've always just unlocked the bootloader, then installed TWRP[0] (or similar) and then re-locked the bootloader.
Once a reasonable recovery partition is in place, you don't need keep the bootloader unlocked.
[0] https://twrp.me/