What is the physical mechanism that prevents the bootloader from being unlocked, and how does an internet connection have anything to do with it?

I would hope there isn't a direct path for internet traffic to interact with the boot firmware...