nope, the point is that the machine won't boot a compromised OS without the user knowing. the scenario is that the bootloader is compromised by some process oth

nope, the point is that the machine won't boot a compromised OS without the user knowing. the scenario is that the bootloader is compromised by some process other than the user turning it off. we're not trying to protect computers from the people that own them. security isn't about stopping people from having full control of their devices, it's about stopping processes from having control that the owners don't allow.