To be under lock and key means to be hidden away securely, but in this context his project was not hidden away at all
Consider the statement "His project - something he was calling morningstar - was exposed and not hidden away at all.". Based on this "His project - something he was calling morningstar - was still in testing stages, under lock and key." a true statement? Yes, no, or I don't know?