It's more complicated than that. The bootloader can maintain the chain of trust for macOS while allowing unsecured OSes next to it.