Comment by beeflet

>A locked bootloader does not imply you cannot run unsigned software in user space.

In the long term it does because the purpose is to provide the scaffolding for remote attestation. Once remote attestation becomes the norm, it transitions into becoming a de-facto requirement for doing pretty much anything in the real world. Today, banking apps. Tomorrow, getting past the cloudflare turnstyle. The next day, everything.