Is there any justification for the cutoff? It might be possible to just patch out the cpuid check and have the OS run.
If it's boot attestation someone will do it. This is probably to force enterprise vendors to move to devices that better support enterprise management, but yes, it drags us kicking and screaming along with it, at nontrivial personal expense.