It might be a solution, but what vendor would go to such lengths (instead of just implementing signature check and denying any kind of custom software) if they

It might be a solution, but what vendor would go to such lengths (instead of just implementing signature check and denying any kind of custom software) if they are not legally abide to do that?