Why doesn't passwd -l keep a user from logging in via other methods?
It does lock the account, keeping users from logging in even if they are using other authentication methods.
The passwd command is not used for locking passwords.
There is no password -l option.
It locks only the password, not the account, so users can still authenticate with keys or other methods.