So make it difficult and explicit. Or shit, just don't go out of your way to make it impossible. Android threads this needle extremely well. Installing a different kernel is not something a casual user can be tricked into doing. It requires a restart, and a moderately complex sequence of clearly dangerous actions. There is no epidemic of people being 'tricked' into installing alternate Android kernels.