3 ms·

Technically hardware vendors can already prevent this since years (secure boot without custom keys and only including Microsoft Windows keys).