However, there are two paths. If the kernel's signature is incorrect, and the device is not sim-locked, the unsigned kernel will be booted with DRM features disabled.