If this is the case then who cares about bootloaders haha. That it's awesome news if it's true that you can just remove parts of the ota. So I don't get why people make a big deal about it. Ignore the locked bootloader and just remove parts. Is it simple to disable the HAB? Or does disabling it require cracking at least one bootloader version? If so...not gonna happen. Brute force is out of the question...and I might be a pessimist but also a realist. I highly doubt it'll be an obscure group of android "hackers" who crack encryption like that.
Well, today it matters because you can't just edit the OTA and take out what you don't like because then stock recovery won't run it. You could try to run the edited one in post-boot recovery, but post-boot can't update the kernel, etc.
No, disabling the HAB is not simple. But I do think it has been done. You'll never crack the encryption, so you have to find ways to evade it.