I really agree on the user signed bootloader part. I think we should also have this for Android devices, since most Android devices only have two years of system/security update.