It looks like Valve wants to avoid going down the road of an extremely locked down system like that. They even view the ability to load alternate OS's as a feature of their products.

They could offer both locked down signed software on top of their hardware and allow for bypass when the user wants to install their own thing. I prefer by default to have locked down signed chain of software bootstrapping but I do want to also have the ability to use my own.