What you are asking can be implemented in the phone OS. Apple's macOS shows one way to do it - System Integrity Protection - https://en.wikipedia.org/wiki/System_Integrity_Protection ... you need to disable it in macOS to make any system changes, like installing a Kernel Extension. Another way is how you have to jump through some hoops to enable root or unlock the bootloader in some phones.