ARM has a mitigation for this called SystemReady. It's basically "does your board support UEFI enough to usefully boot a battery of generic ARM Linux images". The Raspberry Pi can be made SystemReady, and Radxa also makes SystemReady-compliant SBCs you can buy.
RISC-V would do well to adopt and promote a similar spec.
I wonder why we are not storing base DTB on the board, just enough to boot the board.