Option 1 is a superset of option 2 - meaning, any hackable device can also be a locked down device because hackability means the power to do whatever.

We don't need option 2, period, and it shouldn't exist.

Just put the hackability behind a switch or something. If people turn it on, that's on them.