They can certainly lock down future models if they want, but the current models for sale will always be able to boot Linux now. That's a good thing, and even if Apple ships a new laptop next year that only accepts signed OS images from Apple, that doesn't detract from the ability to run Linux on this year's model.