Why doesn't passwd -l keep a user from logging in via other methods?
It locks only the password, not the account, so users can still authenticate with keys or other methods.
There is no password -l option.
The passwd command is not used for locking passwords.
It does lock the account, keeping users from logging in even if they are using other authentication methods.