so... just sell a phone with a script prompts the user to install the OS, and it auto-verifies hashes, can't be bypassed, etc. Is that too simplistic a solution?

I highly doubt that would work but there could be, say, a card in the box with the link to the webinstaller and the webinstaller can be made even easier.