[floatboth]

If that is the next logical step why would they go out of their way to design a whole mechanism for running custom kernels?

They could've just released a locked down Macbook in the first place if that was the goal.