It's not difficult to imagine mandating signed bootloaders and signed software to be the norm aswell, there is no one who can make chips by themselves.