There’s a lot they could have done, locking down Linux isn’t that hard. Just look at Chrome OS, it’s based on Gentoo, yet it’s locked down completely. All they had.to do is lock the BIOS, enable secure boot and disable root access, and then it’s pretty much a locked system.
Eh, you don’t get to kill that one