Yes? Just release the source code, sign the bin using a private key and validate the key before installing that firmware. It isn't Fort Knox, but look at how l

Yes? Just release the source code, sign the bin using a private key and validate the key before installing that firmware. It isn't Fort Knox, but look at how long it took to break the PS3 which utilised a system like this (years). While people may find other ways of gaining root and can subsequently disable this check, it would take third party firmware from "trivial to install" to "a damn pain in the ass." Heck if they REALLY cared just enable things like SELinux and move a lot of root processes into other users.