The Lock bits are placed in a separate fuse that can prevent a programmer from accessing the fuses, Flash and EEPROM. When a locked device is accessed with UPDI, only the control and status space is available, allowing the user to access device ID and User Row and execute a chip erase.
A chip erase must be executed to unlock a device locked with the Lock bits.