Exactly, and this goes beyond mere self-signed code (Gatekeeper) and into things like SIP and private entitlements. As long as the user controls the bootloader, the user can also patch the OS to do whatever they want.