Most chromebooks have that actually. First stage bootloader is shipped read-only (and then there is a secure boot chain), but can be rewritten. It's actually a

Most chromebooks have that actually. First stage bootloader is shipped read-only (and then there is a secure boot chain), but can be rewritten. It's actually a screw, and it's not totally trivial to access though.