Boot into fastboot mode by holding VOL- then POWER until the screen lights up with an interface like this:
The last line will indicate lock status: "locked" or "unlocked".
Anyone can easily issue a relock of the bootloader by executing
fastboot oem lock. This had been the case from nearly the very beginning - not sure where you got the impression that only manufacturers can do it.
Although the relock command triggers a factory reset, if the ROM itself was modified (modified
/system, plus a custom kernel that turns off dm-verity), relocking will not prevent the OS from booting up afterwards, therefore it's not an optimal way to make sure the phone hasn't been tampered with. If you absolutely want to stay clean, unlock the bootloader and flash a factory image.
Lastly, an additional suggestion: if you like to play around with the phone (root, etc.), keep your bootloader unlocked so that you wouldn't end up with a brick when things go wrong.