Edit: A more precise question would be: What is the analogy to Secure Boot and the hardware being locked on a Macbook?
The only additional complication might be the T2 chip in the same way that TPMs might be an additional issue in other business laptops.
Edit: A more precise question would be: What is the analogy to Secure Boot and the hardware being locked on a Macbook?