Most open source developers would prefer the security of an insecure BIOS to the risk of having someone lock down their device on them. Same problem as with Android. Exploits and holes are a now a necessary protection against large corporate interests.