Lockable bootloaders are the best of both worlds.