Let's pretend there is no financial interest in restricting computer access. I think the best and safest option would be to manufacture all PCs with a similar m

Let's pretend there is no financial interest in restricting computer access. I think the best and safest option would be to manufacture all PCs with a similar mechanism to chromebooks write protect screw that you have to remove to unlock the bootloader. But instead of just unlocking the bootloader it also gives you TrustedInstaller privilege in windows.