Yeah I'm aftraid of this too. I was hoping N900 and up will be more open and more hackable on the lower level (kernel, bootloader). This indeed looks like signed bootloader loading signed kernel with disabled (or signed?) kernel modules. So most probably no extra kernel drivers or otherwise you would be able to load anything into kernel and disable DRM in one way or another.