They allow you from replacing the firmware on the x86 devices (and it's similar on ARM: https://plus.google.com/109993695638569781190/posts/6MDhf9HuiPB https://

They allow you from replacing the firmware on the x86 devices (and it's similar on ARM: https://plus.google.com/109993695638569781190/posts/6MDhf9HuiPB https://plus.google.com/109993695638569781190/posts/6MDhf9Hu...). From there, you can do whatever you want. If you don't want to dive _that_ deep, the developer switch still disables signature checking on kernels, so you can replace that one as well, but with their specialized bootloader, it's somewhat more difficult to get a system onto there than on a regular system (expectations on SSD partitioning etc) (edit: clarified bootloader/firmware situation on ARM after finding appropriate link)