I’m assuming their “threat model” wasn’t individual users going through sophisticated hoops to install their own hard drives.

More likely they wanted to make it difficult for grey-market vendors of unauthorized disk drives to escape cease and desist orders from Microsoft’s army of lawyers.