Unfortunately, for this use case the attacker that users are worried about are also the ones that will be installing the bootloader on the server in the first p

Unfortunately, for this use case the attacker that users are worried about are also the ones that will be installing the bootloader on the server in the first place. I don't see, from a computer science point of view, a process for verification that can't be emulated by the system that runs it.