... and unless your bootloader appears in that list-- is signed by one of those signing keys, ...
... subverting this. You could make a thing that looks like the bootloader but isn't the bootloader. ...