The reliance on boot security is plain stupidity. The only safe way to ensure data security is encryption. There will always be some kind of security holes in linux kernel

SO GIVE US AN UNLOCKED BOOTLOADER.