Well, it's not intractable if it's pushed to the underlying hardware and signed drivers.
Valve could build something into their chipset and start signing the Steam Deck drivers, create secure boot etc and essentially create an Apple SIP equivalent. Wouldn't work for the rest of the Linux ecosystem or other devices, and people would absolutely howl about it, but they could do it.
Valve could build something into their chipset and start signing the Steam Deck drivers, create secure boot etc and essentially create an Apple SIP equivalent. Wouldn't work for the rest of the Linux ecosystem or other devices, and people would absolutely howl about it, but they could do it.