> already has a pretty high cost and difficulty

That's true, but properly implemented secure boot could serve to increase it by an order of magnitude.