There was too much engineering work put in to make the M1 be still secure by default while allowing you to run other OSes. If Apple wanted to make it so you cou

There was too much engineering work put in to make the M1 be still secure by default while allowing you to run other OSes. If Apple wanted to make it so you could only run signed kernels then the best time to make that breaking change would’ve been when the first Apple Silicon macs were released, not three or four years down the road when suddenly they say “throw away that bespoke firmware and all that special security work we did, just load the iPhone bits on there”.