How can they block custom ROM's? Let me count the ways!

-signed bootloader

-encrypted bootloader

-e-fuse

-not disclosing drivers

-legal threats for implementing proprietary drivers/ software

They can always fall back on statutory protections. They can also do OS detection and boot units that smell fishy.

Not letting you install a recovery.