I would never want a verified bootloader on my device. I'd much rather have an open user friendly bootloader. All you need is for sd cards to not be the default option and not allowing the boot to be written to except in the bios. Verified bootloaders mostly exist to keep people out of their own devices and to get rid of freedom with software. They do it because at first they wanted to protect their DRM and now because they want to make sure you can only access stuff Google or apple approves of. Everyone knew that's what they were doing and they denied it and they knew what they were doing anyways. Corporations just do not want people to be able to make their own decisions about stuff. Platforms like YouTube used to be amazing in the early internet days. A treasure trove of knowledge and perspectives and amazing mature content. Now it's algorithmically controlled brainwashing and corporate gatekeeping of knowledge.

Really the only security you need is to have up-to-date patched web resources, and port blocking if you are t completely unaware of computer security. It's not bad to have an option for a safer level of access for people who don't know, but they went way beyond this to keep actual tech literate people out of their devices. Anything beyond those basic security measures are essentially useless anyways because they are going to rely on zero day exploits which people cannot anticipate. In fact most developer tools that arent android studio on a pixel device or something rely heavily on zero days and hardware bugs to get root access. What did Google do? They tried to redesign Linux to be a rootless and immutable file system. I honestly hate all of that and I just want to put Debian on a phone with working cell radios so I can use it as a cell phone. I don't even care about YouTube anymore it's essentially useless now. I'm just going to get the cheapest phone I can and leave it in the car with no data plan and build my own portable device running Linux so I can download stuff I want to listen to at work instead of using their trash. That will piss them off anyways if you leave your phone in the truck because the government will get paranoid that you are talking about something they don't want you to talk about and it will piss off Google because your data will be less valuable to them. If many people start doing this, leaving their phones in their vehicles at work, or in the house instead of carrying them, because they have become almost entirely useless unless you want to consume tictok brain rot, they might actually realize that they went to far. Since I know people can't be bothered to protest, I realize that they only thing I can do is just try to create my own solutions. I bought some raspberry pis a few years ago for this very reason just in case the UnS went full fascist. I keep old cell phones around that I know have exploits so I can install what I want on them and not get stuck in the big tech cartel of mind control and surveillance.