Should be possible to get around, no? I guess technically they could lock us out, but my naïve self is thinking that surely there would always be a way to disable it, like how we can disable SIP now, through Recovery-mode?