The ESXi lockdown mode does not lock down the machine. It only prevents direct VMware vSphere client connections.
The lockdown mode, only applies to direct vSphere client connections. To ensure a complete lock down, you must set the advanced configuration option techSupportMode to False. This disables the unsupported technical support shell.