thanks for the detailed info 😉
now it seems the MS is not behaving properly. The next step would be to contact Nokia and check with them.
anyway, you can already re-assure your subscribers telling them that their connections are indeed secured with the best ciphering (or almost…) and that the “open lock” is not meaningful.
thanks again for sharing your problem, it’s interesting !