The public statement is in the software by allowing to boot even non signed OSs from an external disk. https://techsviewer.com/how-to-allow-m1-and-t2-mac-to-use-an...