How about just make it so they cant sell a device that is locked down from the owner.
The fact the boot ROM will only run code signed by apple effectively lets apple retain the right of exclusion even after selling the device.
At the very least a device owner should be able to load their own signing keys for the boot rom to use.