This argument made sense before the filesystem was encrypted. Also there's no reason the bootloader couldn't wipe the flash when it's told to load an unsigned k

This argument made sense before the filesystem was encrypted. Also there's no reason the bootloader couldn't wipe the flash when it's told to load an unsigned kernel.