With the right trusted computing modules, it will be impossible. As far as I am concerned, the asahi developers are building on a foundation of sand because Apple could just lock down the bootloader for the iMac laptops or whatever next generation