They could lock out any other os but windows if they wanted. Mobo makers just need to limit to secure boot only, not allow legacy boot. Only allow the Microsoft key and Microsoft to stop signing the Linux shim. Then it’d not be possible to install Linux or anything else really.

Not going to happen short term. But definitely a possibility.