> Their point is to verify that the whole OS from kernel to userspace can't be modified by 3rd parties (such as you, the owner of the device).

Or, _perhaps_, someone who doesn't own the device.