The requirement says manufacturers must try to prevent the device being sideloaded with malware before first sale to consumer(so basically no unlocking bootloader until the OEM knows it’s in the hands of the final customer, not a reseller). Xiaomi’s 168h rule already exists to prevent this. But...