Yes, you are correct that preventing users from making modifications to anything in the chain of trust without being approved by an already-trusted third party,

Yes, you are correct that preventing users from making modifications to anything in the chain of trust without being approved by an already-trusted third party, likely the company who certified the device, is by design.