1) the bootloader unlock is masked by flashing the EU ROM in such a way that the safetynet test is passed and the banking apps work.
The guarantee remains with BL unlock. I myself got a defective device with an open BL replaced during the warranty period.
2) you get OTA updates, but you have to...