Earlier quoted context omitted.
> So, the "walled garden" is intended for the underlying hardware. I don't think that is what he was saying at all. Regardless. There is nothing preventing Linux (or Windows) from booting on Mac M1 hardware. People almost certainly will have Linux running on Mac hardware before too long. It's just a slog getting it working well. Not a walled garden in any traditional sense, just difficult to implement.
> There is nothing preventing Linux (or Windows) from booting on Mac M1 hardware. Except the iOS-like secure boot verification and complete lack of any kind of documentation or drivers for the hardware. Details!
The other policies available are a) verify at install time the boot kernel is signed by Apple and is the most currently available version (default) or b) to verify at install time the boot kernel is signed by Apple without doing an online check (allows downgrades).
In all cases it's the same underlying mechanism that records what the system should be allowed to boot (according to whatever policy is in effect) and verifies at boot time it hasn't been tampered with. Big Sur takes that further and cryptographically verifies the entire system volume hasn't been tampered with (even offline).
You are correct that Apple does not provide drivers for other operating systems for M1 Macs.