Locking down PCs is easy: just set a random password.
Just blow the right hardware fuses and secure boot will be forced with a key that doesn't (or can't) exist.
Just blow the right hardware fuses and secure boot will be forced with a key that doesn't (or can't) exist.