The Raspberry Pi foundation is working on adding a signed bootloader and trusted computing to their next chip. I'm looking for the source I found, and I thought it was [1] but don't see the text there anymore.
[1] https://www.raspberrypi.com/news/bullseye-bonus-1-8ghz-raspb...