You can’t regulate the ownership of computing devices.

It’s too generic. There are too many of them.

They could ban and phase out systems with unsecure bootloaders. That would go a long way. Many vendors have already locked down their boot process.